7eb149645e0b469bc443cff3e65bef03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7eb149645e0b469bc443cff3e65bef03
Size

172KB
MD5

7eb149645e0b469bc443cff3e65bef03
SHA1

bf8b81e919c0d5cbab0b24b1f180f8917d691ffb
SHA256

031faa563e43b3ab5b014c39041e709b20a96cf726527bc45ccbd0db0f733c81
SHA512

ed80b0b2c1adad513cb1a2c6d8d836cc2c05db5f902fbff320ead89049acfb35f8179035370b72caaeb08ffc2df86d9baa67746bf1ac72b9030e54089b55d7a9
SSDEEP

1536:nGtOLsh7AShq4vMPQekhOXWsA7IFAiaBIHx+g1d:Gysh7Awv6iXzIF60+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7eb149645e0b469bc443cff3e65bef03

Files

7eb149645e0b469bc443cff3e65bef03
.exe windows:4 windows x86 arch:x86

942abe0283eea0388ae00a58e1108761

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord595
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord536
ord645
ord681
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bdgsdyv
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE