7f85f22af5dc0208719a4c2cd96371b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f85f22af5dc0208719a4c2cd96371b5
Size

128KB
MD5

7f85f22af5dc0208719a4c2cd96371b5
SHA1

49efec64c1bd570fc6b0e3050e3640156b48f0f0
SHA256

55818d508d08d666e25a94700f31c20a34747dce720553a1320131b8d3c34540
SHA512

656cb88d034adcb509484a9e7b6042b882f43d92f4f6b23d050e8e85a955a1869fb06bb7c468191d1c2efd421133132c901e775aaa926a33e0d46b20473ab142
SSDEEP

1536:pIIcRJhNdYadEFDOh+lEWdsMviQYIY9XMIK+yJ8eE0wh:IPYaKFD7E6sMMMPy0wh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f85f22af5dc0208719a4c2cd96371b5

Files

7f85f22af5dc0208719a4c2cd96371b5
.exe windows:4 windows x86 arch:x86

64ca0673647fbf395ab7fe1672fe4519

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord621
ord516
ord666
Zombie_GetTypeInfo
ord592
ord595
ord598
ord599
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord606
ord714
ord608
ord531
ord716
ord532
ord717
ord319
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord570
ord571
ord576
ord685
ord578
ord100
ord320
ord321
ord616
ord617
ord619
ord581

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ