3c9a8cd663b520ce3024f5e1092d5c57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c9a8cd663b520ce3024f5e1092d5c57
Size

544KB
MD5

3c9a8cd663b520ce3024f5e1092d5c57
SHA1

b3916b5e0de6720f1035b4635a11cbdf41f6e8cc
SHA256

04842d25297dd2e720cdd36842cf4a86404815fd1eeaa08bcf1016dc3cf9d414
SHA512

6478fb008179f84ce7f971eedb23d35f0de1dd100b010a7a2adaf239f80ae01ea98c1b5897f17c7ab859ec92915710f9cd7b8d4529abf71ee0998964ad4e4a5f
SSDEEP

12288:tS4htLwikS/hyysUDxm9d0/LVdw7t5mBrC4v7OWmp:tS4FkGgysUu0/kpIBrrDK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c9a8cd663b520ce3024f5e1092d5c57

Files

3c9a8cd663b520ce3024f5e1092d5c57
.exe windows:4 windows x86 arch:x86

63b3c34045b57b02a8d1b0422ccf2572

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord598
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord570
ord648
ord571
ord100
ord616
ord619
ord581

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 516KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ