378a9f45ce787c460dab182567bae3ea | Triage

Sharing

General

Target

378a9f45ce787c460dab182567bae3ea
Size

836KB
MD5

378a9f45ce787c460dab182567bae3ea
SHA1

08dd23bdff9830e908874233d0733f508b4b6d27
SHA256

7669d1518ef19d9709f8819034043c22dbd3dadc61827060eda0d7c5512fb838
SHA512

3719903d2cbdbb9567bde29865e50421134c992d8292721944eb43530aeb3691dcbbb280501a8ff8a9f89e51f44807fa74ccbb1b625791a432a92c3aa3162d99
SSDEEP

12288:zkC95PVOMMz/ZBdS/Duw3KK3eyj3NudGBlnrPxCpBpafR6ApnpT8y2O5Fe7y:xVOMSjg/b3ey1BlTxMBa6ApnpT8y/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
378a9f45ce787c460dab182567bae3ea

Files

378a9f45ce787c460dab182567bae3ea
.exe windows:4 windows x86 arch:x86

a615653761a5be5ee75dccc85ff6fb41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord572
ord573
ord681
ord578
ord685
ord100
ord616
ord619
ord581

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 744KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ