436fe26495b09dcf828843ad230939b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

436fe26495b09dcf828843ad230939b6
Size

187KB
MD5

436fe26495b09dcf828843ad230939b6
SHA1

e3551dd485c698117b5fe2f931ea4299f7f6e1d8
SHA256

52960253e95eaae9f7fd7a404bdc9140655edc8c9b33c1c73496584ea78cb63e
SHA512

224bce69bb56899e5ebd206d3610c11d700aa79b3553c1f1d9fd9bb2ded1d05ef5fc1f35b939b2077a3cb2e20c7c123152e10f95a5dae91c28a26bc396a46c23
SSDEEP

3072:o+B5y4P4V+9mi6T1wR9FwcYOjZyzkaM0F0EScTxo3+sZ/lWL9WNPgqAk2+RLWczl:o+icmi6evF1YK0rC3rZ/EJWJve+RLQg7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
436fe26495b09dcf828843ad230939b6

Files

436fe26495b09dcf828843ad230939b6
.exe windows:4 windows x86 arch:x86

1ee459202d13685d56cc5faff4639e09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ