8dd529eb56c5749954c103915e5d8320 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dd529eb56c5749954c103915e5d8320
Size

56KB
MD5

8dd529eb56c5749954c103915e5d8320
SHA1

26382a48a881bdeb5417556a985308f4c9f48ea2
SHA256

86cec1936cadb34881269484652eef4a494d7d0596224850b351f3687538d600
SHA512

d56e6b3bda10469d05ce9014bd7df1a2b6f808fb8d95c1913fa542dde70d7d8ca402a74e922a3efacd20ba758db8af47bbe2066f4e3e1a0766a8c43b15e6a0e8
SSDEEP

768:1UQTK2VMXrfy7idokJnphiUxV/WuTy1NLkBjKgwcJntgPH59cK0FI4XGgdj5T:kqAK2vNV/WXYjKgwMyfnTSISjT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dd529eb56c5749954c103915e5d8320

Files

8dd529eb56c5749954c103915e5d8320
.exe windows:4 windows x86 arch:x86

b37b6af3ac7115b03321033fba7cad19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord598
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord616
ord581

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ