3df3dbe0ab50e64d1ff2af6f153abbbb | Triage

Sharing

General

Target

3df3dbe0ab50e64d1ff2af6f153abbbb
Size

48KB
MD5

3df3dbe0ab50e64d1ff2af6f153abbbb
SHA1

b6b2dae329058646b9502799caf46d8ba82b4a8d
SHA256

ea01683e3e75a03ac5075f9702802576d925b9e33a36576b07cda821a5399596
SHA512

717a95f8e4b23b1e9cbe03e24a80faa87bfc8efad4250113f3a5ce77e3f4903355e24e49abc54b91c9b117f66e94fb62fd56e5b790c0165fd39d8f155d26a5b3
SSDEEP

768:cQPocvgUi1LGAhNJiE3fsKCiofE5mVeGUhvy4gixe/Zqc2D9swN:cQ7uLDsKCoMvevyp/M/se

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3df3dbe0ab50e64d1ff2af6f153abbbb

Files

3df3dbe0ab50e64d1ff2af6f153abbbb
.exe windows:4 windows x86 arch:x86

611037478e5ed22cafad1431a3b15037

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ