8bfabc55773c754e2e164aefad359c0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bfabc55773c754e2e164aefad359c0d
Size

196KB
MD5

8bfabc55773c754e2e164aefad359c0d
SHA1

762af883e9d363c13d095dc36b91a3637c84475b
SHA256

a4f1b81b9bb30379a92a2da285fb0b46f391002b7f341c25e52e475861fd9a47
SHA512

8863a1111e240c982b6ab47c5b3a0b3491e87016824c5a9bba84fdb1cc23d650d0e0cccb5084662662436411f12d105208f6f0d727c1a435627761d2905fbfab
SSDEEP

3072:qIdcFLEdskgrt05bnwhVh6PTPW9PiikeNuHuFLYra:XWjZ0xCVh6qCWFw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bfabc55773c754e2e164aefad359c0d

Files

8bfabc55773c754e2e164aefad359c0d
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE