3bb42b99c2fea2a166b317b4d985ce24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bb42b99c2fea2a166b317b4d985ce24
Size

97KB
MD5

3bb42b99c2fea2a166b317b4d985ce24
SHA1

9aea50a1f7f45223cd9da839308e635466b1fe97
SHA256

5663c8d6552118678957f494c6e39c885469f239c1d151c6c32620bc53b2983e
SHA512

681de15b566c759bbb974c84580dc1e00f69870f63844c3d4647c891d5590bd9a9d21ee6bd8186f71e65b78a178c8ec328e0a1f5d8ae546ceb2d4da9bb1be9b5
SSDEEP

3072:VofrVpPfCwlzekVPTq5gu1TAbCmCfkVl4sm/:ChpPfCqNq5j1TAbCmCfcS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb42b99c2fea2a166b317b4d985ce24

Files

3bb42b99c2fea2a166b317b4d985ce24
.exe windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Sections

.text
Size: 66KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE