79904e777233bb1b3d2a2023e28d6ba7 | Triage

Sharing

General

Target

79904e777233bb1b3d2a2023e28d6ba7
Size

48KB
MD5

79904e777233bb1b3d2a2023e28d6ba7
SHA1

26728a47b0b7474a7d2fae14a348814aa1533695
SHA256

e2d237a490e601ebed936a0655003afb5590f6d45a911fd02d022d9c6bb36c67
SHA512

75c1d139d52b484cfa14c4543bc4bc590bbcf4210ffd242d5658b4ef3fc425142e9ecc33ff6f361341ce0c13f9664ae3f380ada58f6162cc446ed6f63a479673
SSDEEP

384:DiZWzJocLHrUfvEbHLNezGXrzcOuZea1XWRE9179pRxjk6y2mI4oj+:DiszJonGR1xupXWRGN91jk6y2mI4oj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79904e777233bb1b3d2a2023e28d6ba7

Files

79904e777233bb1b3d2a2023e28d6ba7
.exe windows:4 windows x86 arch:x86

fee440051d9aba779998d5f443e53313

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ