78d99e1b8c61963831137d45125ec311 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78d99e1b8c61963831137d45125ec311
Size

105KB
MD5

78d99e1b8c61963831137d45125ec311
SHA1

17c3320a14d4e0cd462e1fbfe0d369b4452a646d
SHA256

717467bfa1a4c83f87cd3cd092580e67f3fd90a28efaa38bb219cb2221fb7db8
SHA512

939f51f1f9c1056a8f19cd0168a824705e2d9ff39be5f1225e78dbb8922a71390d083310a96d28ec1af6ed0fb6a1385371f594ac8d19f35fb5330310582858ee
SSDEEP

3072:K9kNWIoX+Nj8ElYSwp9wdib6AGCOZcksdtXozSBZ:K9kNWrviYDKi2oqz+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78d99e1b8c61963831137d45125ec311

Files

78d99e1b8c61963831137d45125ec311
.exe windows:4 windows x86 arch:x86

d1a0a39215304aeb5396819efb3dcd84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaCopyBytes

Sections

.text
Size: 98KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE