38299d33ea61a45be467d3c85415e799 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38299d33ea61a45be467d3c85415e799
Size

20KB
MD5

38299d33ea61a45be467d3c85415e799
SHA1

c13e968ced0ea00f44f43e2ca033852a6fae2897
SHA256

1a6970d0cf54e5497ada3315196fa5a5d28f80f19e1fb10aab51228f9860f79b
SHA512

510ca63dfea9a53dec1c86a5e9c7318f0033154fd87371da5deb2cd5043f1f994f77ae564a146a1522dd337543e1296d2a99cffa2fcb340bc006b77ef37a9416
SSDEEP

192:yA+5U6CBRCbk3EtaMSbvhbBcr4Swiyx19AM:yA+5U63k38aXpjSwiy/9AM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38299d33ea61a45be467d3c85415e799

Files

38299d33ea61a45be467d3c85415e799
.exe windows:4 windows x86 arch:x86

1c6da49b67420a1180ae2e811f88c4bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord595
ord631
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord537
ord644
ord578
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ