71d053de7592c32d9dcb84917ebdc685 | Triage

Sharing

General

Target

71d053de7592c32d9dcb84917ebdc685
Size

24KB
MD5

71d053de7592c32d9dcb84917ebdc685
SHA1

8a392b349fd2b244189b4122c624035b0fddd721
SHA256

6fb6fcc7af9624d4f0afb42d32c0fd6734e5fed0348ed2baece6185a2d406cbc
SHA512

79f46b964a4d97759a0b0201207d965e5e716dc09a4c6456ec6ff8232cc32b03e2a6b69ea8313531405ae69c518e9ed38e8d4196984201c3c49c0affd9753caa
SSDEEP

192:U0tt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:U0ttDD74mVaNj2W3Dwre/9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71d053de7592c32d9dcb84917ebdc685

Files

71d053de7592c32d9dcb84917ebdc685
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ