79332db85cad1b6fbd0ec81638a91f9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79332db85cad1b6fbd0ec81638a91f9e
Size

197KB
MD5

79332db85cad1b6fbd0ec81638a91f9e
SHA1

9c07b260143ce1d28008e1325a93bd39a745ec5d
SHA256

c642eefd818b4c13382ab2e4547cc478abd3d8bd6297b39badf46bd25b29477a
SHA512

413b37984007bc2e6f9c78de462507b3c6373db02dcaeefad5ec4e3994ff00a1fe703a7ad6a23bd7fc8357b5713d20d24f5bf728665d7ccff7a0aab5e229beaf
SSDEEP

3072:VZGtAm1BF0lLTPJELtDb1xzQejWy9YgBdBn/Xj68/X0qLUKZLlg:SJAvMtzzJbLB/j68/k+ZLlg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79332db85cad1b6fbd0ec81638a91f9e

Files

79332db85cad1b6fbd0ec81638a91f9e
.exe windows:4 windows x86 arch:x86

16327aa13004d48303baf0afd3b49de7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

MethCallEngine
ord516
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord681
ord685
ord100
ord618
ord581

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ