70ca511b6cc68868ad6425ac231633b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70ca511b6cc68868ad6425ac231633b5
Size

16KB
MD5

70ca511b6cc68868ad6425ac231633b5
SHA1

7cd9ed3c82c30f273a9ac8f9098893daefabb138
SHA256

829c3bd23f481d2ae2ee238e12617438b816c15c19262a72e9bc331ddc2552e6
SHA512

05f7b4b492316ce767a23d8a39efa78f3fc7c65f4387c7775e721297e8ffcc32345ba532f01d16b8e9234b1cc113a6c905d9b7df3a5bf4d54326f93a580055ba
SSDEEP

96:k/AMiLFTmzMh+7CMEMHQ4DpuSsEfMYegYAGVqSXayuJpx3FS3:FCvEMw6u6fMBgYXVqG/uJpLS3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70ca511b6cc68868ad6425ac231633b5

Files

70ca511b6cc68868ad6425ac231633b5
.exe windows:4 windows x86 arch:x86

09b07cf108382e69bbfb504e0a6565b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord557
ord598
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord100
ord610
ord617
ord619
ord580

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ