75dae4315bf0bde6241865e0d3742f43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75dae4315bf0bde6241865e0d3742f43
Size

2.6MB
MD5

75dae4315bf0bde6241865e0d3742f43
SHA1

4de4bab0c384dc7d04aeab0f2b181a8feab9861d
SHA256

30df85e9e5209326e195b262215d18074c9e45c1a98f8a5d01b4ffd9d86c014c
SHA512

9d17cda35ca71218326e6a345d9663fd0b58180bba1135bbf553ee64540aad08853f94710f4ec79c3442f89dc630b79d8b5c92ec7155d36abd6c7750215a9262
SSDEEP

24576:816Vth3LrWsH/nV4Ot8zK0qt4L7gLB/wYM/GkLk53YSJ+lXAkJQnsuMVCvmyTYB5:TtLKshEKa7G/0xLkmzXCvXvG7Bhoil

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75dae4315bf0bde6241865e0d3742f43

Files

75dae4315bf0bde6241865e0d3742f43
.exe windows:4 windows x86 arch:x86

f0e0bdd0f1d6c9a713c51fcb7bce573e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord536
ord645
ord648
ord685
ord100
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ