70e1682854e1b5771b91eb317df85bd8 | Triage

Sharing

General

Target

70e1682854e1b5771b91eb317df85bd8
Size

204KB
MD5

70e1682854e1b5771b91eb317df85bd8
SHA1

cccf0c59a8071485f23a36488b9eb65b7d5e23de
SHA256

5a33e61b6625e2cac6ce1b3cfb05958cda95b7257d50e1d0108b83596392a5b6
SHA512

a9fedcaa034c78463933a0347a525618ed01114956c8779f90dac5dfeec2f84ea6a903f7b65cd62b942084d181bc510138824b9554f5eeffb1eb5d2ebe9072d4
SSDEEP

6144:9GaO0vYQoJfzRMgSf27kBPpVrixUG/NE:9GpQUzRMzNBPDrPGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

70e1682854e1b5771b91eb317df85bd8

Files

70e1682854e1b5771b91eb317df85bd8
.exe windows:4 windows x86 arch:x86

bf07bcb10d87dbe5211b2a75044750a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord693
ord587
ord588
ord695
ord696
ord697
ord698
MethCallEngine
ord514
ord515
ord519
ord661
ord663
ord664
ord595
ord303
ord703
ord598
ord704
ord705
ord707
ord309
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord714
ord608
ord534
ProcCallEngine
ord539
ord648
ord682
ord577
ord685
ord100
ord579
ord610
ord611
ord612
ord540
ord541
ord543
ord544
ord546

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ