751a48a12078e2c512af6014a53b630f | Triage

Sharing

General

Target

751a48a12078e2c512af6014a53b630f
Size

176KB
MD5

751a48a12078e2c512af6014a53b630f
SHA1

cb8e204bc8c7bfa8cb03881ce2acc124f543ca61
SHA256

c0af1d3171fc09a50db774c84d85ab5197a7f770372d2d93e4c54313816f0b7e
SHA512

18f2e2764950fe4e79d7a02f2aa8582dc3a7dc5eecf86ea391012c121d00e2f0b805383aadf9dcb1c3e5c68f6a1be26d3c92a784e7bfdcb827c12612b69d68c5
SSDEEP

768:lDSxf89x8dLQc9CcXdUT0VrvGoCxloLsyc9pOT0MhH9as0D91iWeTT:lqY8dLQ3loQX79MWrD91T0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

751a48a12078e2c512af6014a53b630f

Files

751a48a12078e2c512af6014a53b630f
.exe windows:4 windows x86 arch:x86

0ec48950b7bb9c6a2a66de4e0afc9762

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord665
Zombie_GetTypeInfo
ord595
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord713
ord717
ProcCallEngine
ord644
ord537
ord645
ord573
ord100
ord616
ord617
ord650
ord581

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ