8d1748400aa65acaff80b749a39f00a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d1748400aa65acaff80b749a39f00a4
Size

32KB
MD5

8d1748400aa65acaff80b749a39f00a4
SHA1

5cba59ef89a6de2c83708c976a680baedbaf21f3
SHA256

a39baebdffed3cf349d85608723a3d60ad28d09cdc1a4af6d9c645ccc12b3067
SHA512

b22cf846b662f530aa84170800e9a2346209e946ec9448851a616593832158dd3f26c354afa57254657fe6309560f2c3700065e860c7f21dd471d4636b14b473
SSDEEP

384:RRjgUEYEW+8Z0qV57YuoXh/DgcpXWzHEGNgqRTwhb7QWriqBmY:RaUhV57Y1Xh/Dgcp6EGNgq2hb7QWrBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d1748400aa65acaff80b749a39f00a4

Files

8d1748400aa65acaff80b749a39f00a4
.exe windows:4 windows x86 arch:x86

3a1aab1f5eed49180ecf9d038c0882d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord300
ord306
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord578
ord100
ord616
ord581

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ