75b152a60f865a8415d63b735bfabaf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75b152a60f865a8415d63b735bfabaf1
Size

20KB
MD5

75b152a60f865a8415d63b735bfabaf1
SHA1

3fa5fc77e7649471512e15fc0f75dc560d6a3da0
SHA256

15efccd819f2e64163b06a142b6b69a471c311e40e50450f677c668c345e6449
SHA512

b5023babfab76f0c2faf0b81439269332bc0c49a07f2abad0d8368096e425f3ffc0f00d7cc722c35c7964e056ef07136d473b2fb67203a2b4df1d11702dc869e
SSDEEP

192:CoW2+gTWvGfG3CYwJygPfgCMiTwlbMzN8LMAsT93YOUdc0XFX:bW4xfICWggAUTMAsT93YOUC0XFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75b152a60f865a8415d63b735bfabaf1

Files

75b152a60f865a8415d63b735bfabaf1
.exe windows:4 windows x86 arch:x86

1187cf66ca7ab6c400a300f74464c9c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord693
MethCallEngine
ord516
ord709
ord525
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord714
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ