8995fb566d98b3519090000fb0a612d4 | Triage

Sharing

General

Target

8995fb566d98b3519090000fb0a612d4
Size

20KB
MD5

8995fb566d98b3519090000fb0a612d4
SHA1

d17b5c4042e4d811d022eb12adadcc965835fae0
SHA256

5452e8be7d2476a69ac52f19abe6ed741c04eadf032acf430df590b84ae07858
SHA512

b60f86d8041dca19509593cf247f1ad4d4597f1862a0731d552f51554f632a8c45bfcf0d5b6fcc8e3228e45e57254fb60c206e2256ecf9816c2c78a094134085
SSDEEP

192:RtArhdvwvGaiaiVsz5RiWVXSXcXUX4XIXmX2XGXdM:zsHvQziFSvisEo42mWtM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8995fb566d98b3519090000fb0a612d4

Files

8995fb566d98b3519090000fb0a612d4
.exe windows:4 windows x86 arch:x86

058aa16e0cf8894f7e6c552e9c784144

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ