3b7bb8673615add422e6c1564a4df13b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b7bb8673615add422e6c1564a4df13b
Size

56KB
MD5

3b7bb8673615add422e6c1564a4df13b
SHA1

0fdcf1b830e2c462b5409a38f73b4dd25e926b7d
SHA256

cb64537442f4720641f35f68ce879e0eb5f32107885f5318efa09aac7b7f5a53
SHA512

530fd67318b985e8708647e3a47b33938b30698283742a42e92ac129f08e4a7b8de3f5722e470af640e145a6025e00d4238841ebf82627d6e25656f3a372b995
SSDEEP

768:NFVbRvGS9sp3MlQpIyrEHq8MuhxibcWokHMLdvjNBbrDiIu5PhBUgf6eyFFH:hbR++q5oWMLdvjNBbHiIi7UgfV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b7bb8673615add422e6c1564a4df13b

Files

3b7bb8673615add422e6c1564a4df13b
.exe windows:4 windows x86 arch:x86

13cd850fe1dc32bee8a81d8cb4ccece1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord100
ord616
ord581

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE