VirusShare-17d5fd8c9fe3e6257e62ba50dcc81573 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare-17d5fd8c9fe3e6257e62ba50dcc81573
Size

344KB
MD5

17d5fd8c9fe3e6257e62ba50dcc81573
SHA1

a2553dc4f425cec5bceceaaabfd7a38b15330b5e
SHA256

5ecb2efd60036a890902a03d9580843c702a8c15b5be3fc231b81d31ec7d76b4
SHA512

f1dfda5d8ca7e08fbf42eafbd5358a02655f9ab1a02b8827495268e55f0f7e841ffbfd0bc8b7b4eb899afd51b69b0755a01e91260ec9cc50d474f3d47cb624e0
SSDEEP

3072:/Ag8XLJsZz5No2EyYKmD6zd33+P+kdMy0pqB4H/yWNKVpqHRhRdWSfRpgmTufAiX:BnIUxbJpL1851rHGPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-17d5fd8c9fe3e6257e62ba50dcc81573

Files

VirusShare-17d5fd8c9fe3e6257e62ba50dcc81573
.exe windows:4 windows x86 arch:x86

f40e9929487081739bcd114f8a834c34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ