VirusShare-011126a8b16eb0d2226c7af990f5dc61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare-011126a8b16eb0d2226c7af990f5dc61
Size

128KB
MD5

011126a8b16eb0d2226c7af990f5dc61
SHA1

925cb3e8e86e18d38cbe44cb97a21ec1a08f3046
SHA256

b6b481093ab24fe6153d5fceaf4bf6d4b1745134820479ff8ee4e56b7cc13cd5
SHA512

f3959d4feb78f2453628f103748b0bfcfecd8a42e71ba9f70ac709b5455b0762a2444d8e8c4e64cf8e0f9866b8ec50d4130c8a5716655128777f750b11077572
SSDEEP

1536:pLC0/obe4A7r0V/WBobe4A7ELC0/PWLC0:VC0AW7jiW76C0/PsC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-011126a8b16eb0d2226c7af990f5dc61

Files

VirusShare-011126a8b16eb0d2226c7af990f5dc61
.exe windows:4 windows x86 arch:x86

aa18d919af45cfed75484128ede2b3be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord518
ord598
ord631
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ProcCallEngine
ord535
ord100
ord689
ord581

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ