798024384d22ec7d00f1f0b8be5380f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

798024384d22ec7d00f1f0b8be5380f7
Size

80KB
MD5

798024384d22ec7d00f1f0b8be5380f7
SHA1

2e5f9bc878de5b511520ce0d20cabfe7aece6d62
SHA256

f9442eeaeeab328a14a70a58a941a054a5b58a7193398d3f5ef5d5d7ba2a035d
SHA512

56b320684347b360440c6cb5e07e9b7883764af4e01df618c937f4e2bfffc51994ea5578af991dbde292a9118cd3d45264a4410910acc1c748b8a3aaad944a22
SSDEEP

768:2Q2D+BINvLJUXQFQTRbBH2005CxTYbq5NWvNpSWS3oZ:2Q8kINvL2vTRbv0/3vNpSWS4Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
798024384d22ec7d00f1f0b8be5380f7

Files

798024384d22ec7d00f1f0b8be5380f7
.exe windows:4 windows x86 arch:x86

43fa61b021fc2385cc70f6ce1c2181bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord594
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord571
ord681
ord685
ord100
ord689
ord616
ord581

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ