64315adf797464f20079fbc9d019d37a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64315adf797464f20079fbc9d019d37a
Size

68KB
MD5

64315adf797464f20079fbc9d019d37a
SHA1

aafb4f192d1c2859b171ab944ac71afaae745d28
SHA256

52ce71e48fff7780eb8019ae0df907e3869e2ae61272247fd89c24ee8f28f6a8
SHA512

f86d921c21ed96bdd0672115e625ef932103d0388ecb65cae3aa0c44ea04efc06593c6c05e2169b3cfd235370b223a2b4c7446232291aa5d9f1a3b30c6d830a3
SSDEEP

1536:JhxrgVdUajo/Wdv5qLP8OCQ2ve7Q9QE9JPr04FYe0FT98n:DxrgVdUajo/65qQM2Wcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64315adf797464f20079fbc9d019d37a

Files

64315adf797464f20079fbc9d019d37a
.exe windows:4 windows x86 arch:x86

b54be3352cbcdee6dce550caf41b018e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord595
ord303
ord309
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord572
ord573
ord578
ord100
ord616
ord617
ord650
ord581

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ