801d85895f6059da55968f4b1a57cb6a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

801d85895f6059da55968f4b1a57cb6a
Size

104KB
MD5

801d85895f6059da55968f4b1a57cb6a
SHA1

ebab6cd030037f8688f2ff81e5d07ef81e5fbf66
SHA256

ce3deb5ccac8bab28407fc87dde17e189b4a3d6635478c2fdaad62319964e997
SHA512

c0a1042c7e977d21706c289300560ebddfd9b523718516154b916e4851cd06b2e2e0adaa049237c9aa800f75074716c640bbae852423c7985f8b7c0bd30a7f9b
SSDEEP

768:QtRKfpMGahIVg7mL5nO4rGQzTGfmgc33emu4v/eo4z7VP7LdGSu2HyTAzfMgTAzx:RfpsqbCQVgd54v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
801d85895f6059da55968f4b1a57cb6a

Files

801d85895f6059da55968f4b1a57cb6a
.exe windows:4 windows x86 arch:x86

1526237bf7cfd8e3aa85a278dae2de10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ