3db20f6a1cdf012f346a8b5d2f6048cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3db20f6a1cdf012f346a8b5d2f6048cf
Size

268KB
MD5

3db20f6a1cdf012f346a8b5d2f6048cf
SHA1

8dcca1e38f7a8f09b5da60caf86647a17d59dfaa
SHA256

2c2ed3418b22d2d3a668ef8078d63ddf6e761c2ca5e525cf8f68ba6e339cf193
SHA512

243cfb21e3679dcbf2ab44611062713c7256269243a0c176379482a5af5c8d118c00715238d5f0b07d28a6270d7646dc7db291f9bbff316d2ae4d6f94b58ee30
SSDEEP

3072:HF6voF3CkEnm23lSuURxK/paQFVCIyxZtIbLPISKaTMjD2B9r3nWGtot+OO3lBTi:HF6z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db20f6a1cdf012f346a8b5d2f6048cf

Files

3db20f6a1cdf012f346a8b5d2f6048cf
.exe windows:4 windows x86 arch:x86

af2ab80a5dd0eb664d59b2af78da9d99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ProcCallEngine
ord644
ord572
ord100

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ