8f9ee4a0111c63b68cb15cffab91cc28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f9ee4a0111c63b68cb15cffab91cc28
Size

40KB
MD5

8f9ee4a0111c63b68cb15cffab91cc28
SHA1

acb2cc82625b7b686c7916a853b567c35563b7cd
SHA256

e391627311cd0ecdad5c463d734089475a642520401757be969f3e8f7929ba14
SHA512

423f20b536f48c08e5bd50f6942615fbba843288d271117e023795e9bbd039c9d3012983a8e1557e64c93714bd73abf6d5862f76cdf4129722b173af63e2b124
SSDEEP

384:PaBbEpLeJnc/mt1Nmg388vAFxcE49o/rZhwiQP8ri64y2P+0CnNAuw8b9amTq1hW:IEN/mtnR/IFCE4mzoNHyg+nH9cL7THX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f9ee4a0111c63b68cb15cffab91cc28

Files

8f9ee4a0111c63b68cb15cffab91cc28
.exe windows:4 windows x86 arch:x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ