8b9f6e1688f211365510c7b42b7848fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b9f6e1688f211365510c7b42b7848fb
Size

352KB
MD5

8b9f6e1688f211365510c7b42b7848fb
SHA1

cb2262b6d7b9af950f66102326d63f1d8d73f8da
SHA256

84252712b9fc41826b56cb300b9b7326999879b661660773742c05ee2fce2f31
SHA512

2644a1956315903d38a0d3d21403578abd12782c2cc7114357e2bea98e4ce66abc15ec6165a7bdd490cf28d001e19223f15e6a4b79f5263584d1831f7984e58c
SSDEEP

6144:fLuwfpalAGAImQLYKGtfGfd0uVr6mnFEIcl7CtyAobsUsQ+:TffMGmaufd0xIXvobs7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b9f6e1688f211365510c7b42b7848fb

Files

8b9f6e1688f211365510c7b42b7848fb
.exe windows:4 windows x86 arch:x86

6e2a9a0f826e27951ed4997a34318426

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord617

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ