7d01b690364bea681697e4f64c540ac8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d01b690364bea681697e4f64c540ac8
Size

37KB
MD5

7d01b690364bea681697e4f64c540ac8
SHA1

7171f88314d5d042ceaf9d454f15ec08dcfd29a9
SHA256

d4f08ebaecd4b86ec6eab519c4f3f81ab38aba322e3a28aa55674c6695f8a286
SHA512

ca7f021d84f0c5601b86b30d8ef68f39b82af0ff47814caa44891700f201ab8b34b81cb8ff4f70cf10da83af600183f2503c4a38ef97bbe836cfd3bbd188c79a
SSDEEP

768:UvBWniuLJJECaxeunUDQ633pKvLvNzrWn/fDup:UvBWn17DQ63mrg/fKp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d01b690364bea681697e4f64c540ac8

Files

7d01b690364bea681697e4f64c540ac8
.exe windows:4 windows x86 arch:x86

570d4f298c94a4336f045d9a3fc9cff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ