8f08ee7155d9c2b89aed35fd23c4d0d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f08ee7155d9c2b89aed35fd23c4d0d5
Size

184KB
MD5

8f08ee7155d9c2b89aed35fd23c4d0d5
SHA1

a39c14bc4598e2ed39bedb15d0ef7a6ce7f3bdb0
SHA256

109d24c5e88685f225d391785e1e1c099ff4f7b5adba4f28bb92cf4d573b4a1e
SHA512

f6ca2003fd550a2052c6177c6608abd1607f3801552f90cccd3967134a87d86e9ce22780e56e1f307d3178338e8d122a806e92d8f92b50f074f392fdf1c58301
SSDEEP

3072:yDPHwyhObqmiVHFyTAr4K+9EJYtKHsdDr57+nhnvHYa:CdOviVHFK87vH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f08ee7155d9c2b89aed35fd23c4d0d5

Files

8f08ee7155d9c2b89aed35fd23c4d0d5
.exe windows:4 windows x86 arch:x86

84e13b7f58c0885a8e9e9f9da0f9ab7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowLongA

msvbvm60

ord696
ord697
ord698
MethCallEngine
ord516
ord517
ord518
ord519
ord666
ord667
ord593
ord594
ord595
ord596
ord599
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord531
ord716
ord717
ProcCallEngine
ord644
ord537
ord576
ord685
ord100
ord610
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc..
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE