76e87f3eb8e64eb451cd4963eb131a54 | Triage

Sharing

General

Target

76e87f3eb8e64eb451cd4963eb131a54
Size

45KB
MD5

76e87f3eb8e64eb451cd4963eb131a54
SHA1

7adc37c1f33597490539817c40d7f0569f2c31d5
SHA256

dbe5ce9715d489bd6d7b86ef703aca19e858b8f39e92341873d46987d73db040
SHA512

c2b8864ab77362850f7b3700d28fd40ed1eb3c8230a2791f6462305f2a0e8fb882f0c595bc5f7e78e41ab1fd6f1e47fd677c4b963e97a810571942be422a8ef4
SSDEEP

768:o6q7HvenzZH6z9dL5ctSZ/d27m4zAFi1KsmP8LNJOIjtPmtiZ46gS:P6Gncl6taVkzsu1JYStNZ4ZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Einladung zur Angebotsabgabe GYTK894 26-08-2021·pdf.exe

Files

76e87f3eb8e64eb451cd4963eb131a54
.zip
Einladung zur Angebotsabgabe GYTK894 26-08-2021·pdf.exe
.exe windows:4 windows x86 arch:x86

7222680ddb4e451832a15109209579c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord552
ord557
ord559
ord667
ord595
ord704
ord705
EVENT_SINK_AddRef
DllFunctionCall
ord569
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord536
ord646
ord648
ord571
ord100
ord689
ord610
ord611
ord541
ord542
ord546
ord580

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ