87e0272c50c1d0bbf356383846d6f1d8 | Triage

Sharing

General

Target

87e0272c50c1d0bbf356383846d6f1d8
Size

52KB
MD5

87e0272c50c1d0bbf356383846d6f1d8
SHA1

8b50499200058b56253408530261d8027417d485
SHA256

530c0a02cae171568478d70e73dec6897c42e7b5e67c6c945c92316d1531e65b
SHA512

8653ce9bb9283e6196edc8df26531786299154d58ec4608a06dbaaf565890a42379c12e1d964938425110201b99ef1cadc0f24556acb91b0294598546cb3b237
SSDEEP

768:yQl3D7E2hO3c9pupMlT/h9Lxkd5W64OHvhf:jV3E2hOM7sMF/Lx4h4OHvhf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87e0272c50c1d0bbf356383846d6f1d8

Files

87e0272c50c1d0bbf356383846d6f1d8
.exe windows:4 windows x86 arch:x86

3fbb6c0d3900c31809f7c0f618914630

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord713
ord608
ord717
ProcCallEngine
ord644
ord645
ord573
ord100
ord616
ord617
ord650

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ