7bb812267da5aad1b63624b089f485e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bb812267da5aad1b63624b089f485e3
Size

325KB
MD5

7bb812267da5aad1b63624b089f485e3
SHA1

9c66206ec461bdce8a0642c3602de2615dda4ee1
SHA256

e1278df4fe25bfdeb06b76d3997ac5ce2bccb668f5a6724045a853575adf06b9
SHA512

bc85251ee3f32759b00f64f26faea1a1b7cebb60cc6594a5dcc7cac8ba414d7d7880286987701e8b0c6f4021b76e82b4058e8cdae8868a925b660a334416d2ee
SSDEEP

3072:r79SleqwUj2bshbzbWstbzfs6bzrs1bzVsE:E2sQsJs0sTsE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bb812267da5aad1b63624b089f485e3

Files

7bb812267da5aad1b63624b089f485e3
.exe windows:4 windows x86 arch:x86

eb0b1aede3c89c3f78d315466863859f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ