79de30325f9f1bdac44539b1b9b30272 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79de30325f9f1bdac44539b1b9b30272
Size

48KB
MD5

79de30325f9f1bdac44539b1b9b30272
SHA1

75ec159f618317bbdef5967326753ca72cd0ce75
SHA256

a24ae44a24618ed12737e9c25edc8fd4b81a8d3c521d6296cd32e9f9a35fb67a
SHA512

def7129bb8e2c8a50108b232b4fa10a18aa1c0db5e7aa45500173221892a9251d9876a494eeeb57be7df964849731dd8e4bbd120f2a27a5e50b3b1ce6525eb83
SSDEEP

768:9Eo/AWeo/JkQYVVU1fBxzXGTM/o/JkQYVVU1fBx//AWc:KWAWe0k01f/DGo/0k01f/XAWc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79de30325f9f1bdac44539b1b9b30272

Files

79de30325f9f1bdac44539b1b9b30272
.exe windows:4 windows x86 arch:x86

4c8de7b14f78f24163aabf548206fcca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord576
ord100
ord618
ord542
ord543
ord546
ord547
ord580

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ