389245ed3a2f680ad7a48c0daa961a86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

389245ed3a2f680ad7a48c0daa961a86
Size

61KB
MD5

389245ed3a2f680ad7a48c0daa961a86
SHA1

b6017c1b91fcb6c5a6f1ac961dfe626be736edb7
SHA256

e2ca63e0053e2d8affb3df6d39e725d7b4aa542f5b79e062631b3699a2bd99eb
SHA512

d2c08cca5f0710b8938fab9803204a629d94848ad794e48ccd1197118f30d807a0490189c2b555aebc95796b1fde8b01df4cd08112c873e144ee79ef6c449c6a
SSDEEP

768:qUD9RkGYQxyc6jLuMPqFqtZ5WHbAwqw45t:qUZRSQxycVMAqtZt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
389245ed3a2f680ad7a48c0daa961a86

Files

389245ed3a2f680ad7a48c0daa961a86
.exe windows:4 windows x86 arch:x86

d5cd42dd5daa2d6d713a5d2926625988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord532
ProcCallEngine
ord570
ord100
ord617
ord619

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ