38a4ddf63cc7ca549e59c528fe433697 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38a4ddf63cc7ca549e59c528fe433697
Size

140KB
MD5

38a4ddf63cc7ca549e59c528fe433697
SHA1

bdea0ddc5ad8e1345519d64d4154c45e32ba0798
SHA256

20902fc75556a8ae9675739b81b0fd0f0b9a7688ffe652ce229fb07ac4d564c6
SHA512

5cc54d447a1b0a4caa36c38741393aa875987f498f4f85ca037db853aab42588af06d58bbdc50e2ea890103336fd7b43b5481e30ef56ebab39e7354cfc4ec0a9
SSDEEP

3072:jW4ZzR7FHVDrUEonY5lYNFdwT6SGfYk6vf:jW2V3hoYidwmYNvf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38a4ddf63cc7ca549e59c528fe433697

Files

38a4ddf63cc7ca549e59c528fe433697
.exe windows:4 windows x86 arch:x86

8da9b0165415dfe65aff506e64b84e5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord660
ord662
ord666
ord667
Zombie_GetTypeInfo
ord669
ord593
ord594
ord595
ord599
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord716
ord717
ord319
ProcCallEngine
ord537
ord644
ord572
ord100
ord320
ord321
ord616
ord617
ord619
ord546

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE