38d82362421af741f589e3507294c390 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38d82362421af741f589e3507294c390
Size

24KB
MD5

38d82362421af741f589e3507294c390
SHA1

7b6c3996b513537d8226ec79002627d8cd3f39de
SHA256

bcf6b38f26f6b2c1fbf26b39f6986b6c886434a2e3ea4287349edeaa8bff49dc
SHA512

0e391407b79cd50a84fd2bce95e420ed7be3e9ba8dd9554039b1fdbfb661199553c4da23e36a5fd9fc207dd9ef6dd43dfbf0b75f14d032f4d95effd2d8e33f21
SSDEEP

384:CnvD2rr8wy8HFBKksWznKnydQQydkOhjTWkgt+zk6IdC:Cr2rRHn1VznIEydkOhtS+zk6Ic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38d82362421af741f589e3507294c390

Files

38d82362421af741f589e3507294c390
.exe windows:4 windows x86 arch:x86

6503200d9b0ea7931e14d0606879af8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord570
ord576
ord100
ord616
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ