0aab583a140b69cb8eb121a9a00c2a4ae204ed810a7b5a6d2d7d9c7beb5dbda2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aab583a140b69cb8eb121a9a00c2a4ae204ed810a7b5a6d2d7d9c7beb5dbda2
Size

64KB
MD5

2660b3c7b53c6b77e925a43160d4f507
SHA1

b4abad2af074dcda0b570d69197fc4cac93ac255
SHA256

0aab583a140b69cb8eb121a9a00c2a4ae204ed810a7b5a6d2d7d9c7beb5dbda2
SHA512

529911eefc4a7487381baa05c66788fd8ab5e120975c469af3f523c86e94e6bee46449237699c2dd8502628e1ac4b293bb709043256aa8c69e957ffc58736cde
SSDEEP

768:brbT/bgPCQoG+1wrHTRIWTviLWqQn2mkjJBTSY8gR5PXr:7T/bgjhLDLfq1JsY8gRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aab583a140b69cb8eb121a9a00c2a4ae204ed810a7b5a6d2d7d9c7beb5dbda2

Files

0aab583a140b69cb8eb121a9a00c2a4ae204ed810a7b5a6d2d7d9c7beb5dbda2
.exe windows:4 windows x86 arch:x86

6225a29bd9227005d6453c2d671f60c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord595
ord598
ord599
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord531
ProcCallEngine
ord644
ord537
ord645
ord681
ord685
ord100
ord579
ord616
ord617
ord619

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ