8de7acee120a656450ce7fbcca1264db | Triage

Sharing

General

Target

8de7acee120a656450ce7fbcca1264db
Size

96KB
MD5

8de7acee120a656450ce7fbcca1264db
SHA1

32e02d38fa4f873d8d80e00b56540e5907287bfa
SHA256

30728d627e738c709fba73875c39fefe5f8f67afd885a804be7d867724f1857f
SHA512

de4bc7ff1e8ee3cd15f60f1b6596ab4b57206e22ea575d5102e4945c76617a27ae9c32ba35e883f9c139996427a41f9dbd80c842e0925eb209be8cb355b3a055
SSDEEP

1536:dLVKFRLjKrDnHaoVyu1spV6tGWt8oR7TtehyDlvZzujWxVeJe8NKywQANxIWM:dAFRLjKvHaoVyKspMtGWt82tNG5iM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de7acee120a656450ce7fbcca1264db

Files

8de7acee120a656450ce7fbcca1264db
.exe windows:4 windows x86 arch:x86

74129951c17768996af8c4f9b867a295

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord303
ord520
ord309
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ProcCallEngine
ord535
ord645
ord570
ord648
ord571
ord576
ord100
ord613
ord617
ord619
ord581

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE