7292f045d9a2922934c92e00b3e23b43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7292f045d9a2922934c92e00b3e23b43
Size

162KB
MD5

7292f045d9a2922934c92e00b3e23b43
SHA1

5061715ed77fd37946e05ef889d95ce20ea5519d
SHA256

1459e2d9c71f776923acf4d62e29ac7d21284cb1a51f58f0d6abccd33e3772ed
SHA512

ac9e6868e2579e1789541cafeaba1e7c46d79c8bf5ddc3c2d116779c4d133112ecd87c4e8b409d807f2a2c3585c8fbd92610f263f32cd31ee9c8e273b2896340
SSDEEP

3072:/EWBIy+PsKuq0D8uK6p5fpj4lJs9nlpfgDcLmOWX80ZfqMmpSOzU:/yy+vuq0rK2Bpjks9rfxmOD0lom

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7292f045d9a2922934c92e00b3e23b43

Files

7292f045d9a2922934c92e00b3e23b43
.exe windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Sections

.text
Size: 155KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE