77052781fbeda93f919d3e2398f9f0a7 | Triage

Sharing

General

Target

77052781fbeda93f919d3e2398f9f0a7
Size

181KB
MD5

77052781fbeda93f919d3e2398f9f0a7
SHA1

9a7bcac9c64a99e97999a947ca022e2a6fe1f07b
SHA256

4860509fbafeeeb523b83bfb5eb08c458e132e2fc7be51700fee86f560977241
SHA512

1999cb3850e6c0ecc4b109b7788c4e117369b4113b8cb95dbe9716ad8715414f65c09eaf432004820cc5e23debec0f3c106ed960ebb749eaef5907ed501a5d92
SSDEEP

3072:mIbsqcbuIFSmqZkoE1OyriBz2kxvauhRNEWADidNSRksRG6hZ:hbsqaroE1OyrzkxvXHNEpDhVL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77052781fbeda93f919d3e2398f9f0a7

Files

77052781fbeda93f919d3e2398f9f0a7
.exe windows:4 windows x86 arch:x86

5240e2db1867a03f8264db0576c23e53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord616
ord618
ord581

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ