493182282b693863de021d3422223411 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

493182282b693863de021d3422223411
Size

6KB
MD5

493182282b693863de021d3422223411
SHA1

d1c9d5958cc9de1ff18b0b4d580210e9f62b420d
SHA256

9d25125cea0b415a9846eb37f6cd4e7702b276e38442e866d780f70810f04607
SHA512

646ebd9c202e4d2da4d8099439dbdc77cebdb48ff3ce4f80e03e8b80f466a118934912286ff20befcb27189b3485ec00e682a28412d917b9fdf3672b449b824c
SSDEEP

96:4QKavJcPOLz3hpknjadBtwLVgDHYX9xuWubeoqxOWsNKMW2PrQYGmTe3e:QI8j6wLVgD43U305uKaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/modulo_hsbcconnectbank.com

Files

493182282b693863de021d3422223411
.rar
modulo_hsbcconnectbank.com
.exe windows:4 windows x86 arch:x86

54f65f07f3c5110fca96365066215033

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord645
ord100

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ