86e244a871668cdb973225d70d1fd7af | Triage

Sharing

General

Target

86e244a871668cdb973225d70d1fd7af
Size

220KB
MD5

86e244a871668cdb973225d70d1fd7af
SHA1

c266ebf0a525da87229d39e3cfe2f86278f12d65
SHA256

debe4dac6780197e9a29896fc318fabc1b2d6370c19496f21fabc395f2ed68bb
SHA512

16bffb158d3b5a68771f59b3dff3484c7a660efe838a7def5845a172d5144854e65f12922a6e6f50c97f7667846cb36c3db530ed95177affe8a8710538fc8378
SSDEEP

1536:bAm/ikrilMHd62eEqusQllRYMUeBqA/FaqvZTzOkH8k6JjfI8FrFBzy:bAm6kxd6LFuHlGY0Yf21FrFBzy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86e244a871668cdb973225d70d1fd7af

Files

86e244a871668cdb973225d70d1fd7af
.exe windows:4 windows x86 arch:x86

aefc3d1d948fd494ebbc9c3f2f34cc66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord626
ord666
Zombie_GetTypeInfo
ord592
ord593
ord300
ord594
ord301
ord595
ord303
ord304
ord598
ord306
ord520
ord307
ord309
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
ord560
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord606
ord608
ord717
ord319
ProcCallEngine
ord535
ord644
ord537
ord645
ord648
ord570
ord681
ord685
ord578
ord100
ord320
ord321
ord616
ord617
ord581

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ