VirusShare-423689cff77b140f961c7b04459ba05e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare-423689cff77b140f961c7b04459ba05e
Size

72KB
MD5

423689cff77b140f961c7b04459ba05e
SHA1

3eaba5547da8413acc002f625cf3d572c120295b
SHA256

ff04b2963fca724168e2dd43e5e3cd0c44a9a2eddf95350566232d733a9299f9
SHA512

2e4f4f38cf4c816d1ea0a90620750d8c321dfde21d40ce487dbab4f26cfdf1f66dfdf401a98d0831b3e78def8bee45dfe1af842c4ad7a08fb3b3353199b2f030
SSDEEP

768:ZiApkDYJAzcX0p7RfUQ7KnOYx45NgGsNA0jpruWx:Z3IckQQ7KnIDgR1rX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-423689cff77b140f961c7b04459ba05e

Files

VirusShare-423689cff77b140f961c7b04459ba05e
.exe windows:4 windows x86 arch:x86

6cdd05e58f586fc8246a00630c3825ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord519
ord667
ord592
ord595
ord520
ord523
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ProcCallEngine
ord537
ord645
ord570
ord648
ord573
ord685
ord100
ord579
ord616
ord617

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ