85c498643d60fd14c88f5dc31e587b91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85c498643d60fd14c88f5dc31e587b91
Size

78KB
MD5

85c498643d60fd14c88f5dc31e587b91
SHA1

4308a7490422d18f58d6d92f542f4f9bf2df40f9
SHA256

f754ef75fd7e048519729aae37ca5d6a9ee043b1f55a69893d2e516ee550e0db
SHA512

1d644ca90fafab0322da42a761c922147f8cb55e99e71b50840f70126182582e74901b16f14c0da942665eaf1df841f8d47090413bd9c352699c46744d5316f2
SSDEEP

1536:b8XYQwdqhDSiIz/+j8kjSz9RT1ryzIIiwyOBK4FFh:nqhDSiIz/+j8k6RT1ryEqyOHFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85c498643d60fd14c88f5dc31e587b91

Files

85c498643d60fd14c88f5dc31e587b91
.exe windows:4 windows x86 arch:x86

51f9a4ba35f72e6bcbd4289062313a4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord519
ord660
Zombie_GetTypeInfo
ord595
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord319
ProcCallEngine
ord536
ord644
ord537
ord645
ord648
ord570
ord571
ord573
ord681
ord685
ord100
ord320
ord321
ord616
ord617
ord618
ord619
ord546
ord581

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ