3db492ad198eb110f34c3ff8835dc5f1 | Triage

Sharing

General

Target

3db492ad198eb110f34c3ff8835dc5f1
Size

1010KB
MD5

3db492ad198eb110f34c3ff8835dc5f1
SHA1

e917deacd7c600452d1ff42991c48d967ac64ae9
SHA256

529d28051a577ea01e48fc62256de8ce1bc32d6620215091582094e461ed3ddd
SHA512

d6318bbd59add5d61daebc7efff1a7daeb48ce8037a1ff87386bb0e2e48b90ca2238a8ebb4ca02cf09f2631d83415ca3e1329b29ff66d44e01979c03e79c58ab
SSDEEP

12288:DUGlKKGrryoXq9qRJy04UGlKKGFVYGdqpv6+xPfrMciyyaWk4FUjPqeGqvLSVkV7:o2oXq9qRI0b7yvPy9Fgqexv2UIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db492ad198eb110f34c3ff8835dc5f1

Files

3db492ad198eb110f34c3ff8835dc5f1
.exe windows:4 windows x86 arch:x86

35abcf1d049c99d8638d6785831d1cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ