3daabe05bb955c4068c7904cc99e473e[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3daabe05bb955c4068c7904cc99e473e.exe
Size

32KB
MD5

3daabe05bb955c4068c7904cc99e473e
SHA1

d9e9ae71b9911c1cdcbfec2543b6c71bd6df7c5c
SHA256

d3a2a374990797071ea36bab5c30dbe1a3b21f350fa9450d4da74dc066f1f46e
SHA512

89f228cf063eb5607302e1b34ee658e58cf5677ac9d2ebfae6269991cd68beabbca9d48b191ae9eae019ae9548f25d2d0328b16889775975d12db202038f69a2
SSDEEP

768:JuzsIdmoIBW+l1CuHkSTz/gRCBEReV5dgOXiANtg9bPHhHXPNWNCB+Gc1H8zHvc:J+sIdmoIBW+rCuHkSTz/ggBEReV5dBtN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3daabe05bb955c4068c7904cc99e473e.exe

Files

3daabe05bb955c4068c7904cc99e473e.exe
.exe windows:4 windows x86 arch:x86

30a790d2d477ee1d1a862af3d2a69480

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord619
ord546
ord547
ord580

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ