379f5948933ce49a1724052b0dce2f69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

379f5948933ce49a1724052b0dce2f69
Size

237KB
MD5

379f5948933ce49a1724052b0dce2f69
SHA1

404af718c888080c047f8d8b07bc123830009213
SHA256

a0d0728f8e85a76d7b9a24ac39cdfb8df64b812b4d7bcb5d5623e5a85afbdb97
SHA512

86ba997edf9c91f9a492bd0ce7f9faab2ff2da72e74f3f04a9d8e5f7381c510c6938ef9d4d53e2193613726f06d6081d50995ba5822d6942045c901644d26305
SSDEEP

768:VHrZtjEF/e782hCY4g/iB0F79KIDN1dCvbYLYQV5nCsm:VrZtaewPBaF79KuUbYLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
379f5948933ce49a1724052b0dce2f69

Files

379f5948933ce49a1724052b0dce2f69
.exe windows:4 windows x86 arch:x86

375c7402f8748b0ff0440c4212cdf8d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

msvbvm60

__vbaVarSub

Sections

pec1
Size: 22KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE