a62778561921f90cc8d7219e42dc4e47[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a62778561921f90cc8d7219e42dc4e47.exe
Size

728KB
MD5

a62778561921f90cc8d7219e42dc4e47
SHA1

674b68539511723cd2faa90d1fb38b768e70e189
SHA256

f0256cda1d6fb77860769f4019ca7239eb4e04bed7c32477a0541234e34d0911
SHA512

b89a0e7071f51eaf1bc581ed52e532ef00b5cec7928dbe839e40686ae2f4638e8540c1dfe0dfb981e05e80317f61208d1f12c1eb80bebdcffc8a5222224e6763
SSDEEP

12288:j3ZlFyEfVwR0pN5AiGTvEMA067/iNCHeRy20f6t6SYr4/C3Hpyv:QE9y1z8y6zicHhnahY/Xpyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a62778561921f90cc8d7219e42dc4e47.exe

Files

a62778561921f90cc8d7219e42dc4e47.exe
.exe windows:4 windows x86 arch:x86

342f55d752cccfd4ecf1a44c7b90889b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord100
ord619
ord581

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d(=/G$H
Size: 692KB - Virtual size: 4KB