393e82a121bbb84cfdb90671c51733ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

393e82a121bbb84cfdb90671c51733ed
Size

72KB
MD5

393e82a121bbb84cfdb90671c51733ed
SHA1

c78225e6fd224f787539081b87f3f92955aa440d
SHA256

e170ebc203ebd860c9c26981df26836304985515ed96b911657ecc789df0e290
SHA512

33b544437feda4408cd28f04df9e9a2d869817814b28893ce662b4aed2f6d1d9d87c8d8c3d11248f0db7719bdd2878c2037a2005426da7c94b8893171b2dc906
SSDEEP

768:mv8s3i6E5nXfUWPYfIc/Qi3qEBQpZaaYfSs14DDUsp93qEBjUWPYfIc/QAnXZs3O:Q3i6EBXlLOUpZ6fMDQsp9NLMXy3i6E3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393e82a121bbb84cfdb90671c51733ed

Files

393e82a121bbb84cfdb90671c51733ed
.exe windows:4 windows x86 arch:x86

7f076f3a1284e8382e0536dbe1729a28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord519
ord595
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord536
ord576
ord100
ord610
ord612
ord616
ord617

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE