663253f8b3f33b7606b159448c042898 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

663253f8b3f33b7606b159448c042898
Size

32KB
MD5

663253f8b3f33b7606b159448c042898
SHA1

c0c479ec755dfdbebbdbd9fb08b2a2c593fd123d
SHA256

c01fe39f1d6a6834a0689a542255ed92a2601fdf9698fedf630d7289897cf631
SHA512

a8032c2c0e492718e3f93785e889da6f2830886aa88fb1a3e6e794e2de04036025301cdfa29bf4bb470f004ced4550524b3aa18ec083527eeddbc3d12cdf60c0
SSDEEP

384:4z1UZpACdD/F7ggNtaApEchbRYCEpMBls0JO79pRxmCImOF:4z1ApAMpUgDrPs04915yF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663253f8b3f33b7606b159448c042898

Files

663253f8b3f33b7606b159448c042898
.exe windows:4 windows x86 arch:x86

e5f68b1626e66889ebbdedaf2b5d37a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord665
ord667
ord597
ord599
ord525
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord644
ord570
ord576
ord100

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ