8fee1272bf50c2fec8efe9c91601bf46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fee1272bf50c2fec8efe9c91601bf46
Size

400KB
MD5

8fee1272bf50c2fec8efe9c91601bf46
SHA1

4a0df959dbe83e19340483f6de35c455970f1f65
SHA256

1ea95b50e31110047f5449e2ff9f37bdb794824d4f39c818c827407e5c46d197
SHA512

9f6380c8d5f1c27780a9e1b846ae4da0bd209f4548034c5c1bc3827e79d488152b8544724f7a3cb64aa1f4703d9ca19ce64a897fd9575aca7391a4bbccc386bd
SSDEEP

3072:rlxOG/Whkp3yYKygcpvnZN1/S4q9W+qVEJ/oEa0ZgSYNNato02drnoIFX6RmSv:OcEybZP0ZQatozpr6YS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fee1272bf50c2fec8efe9c91601bf46

Files

8fee1272bf50c2fec8efe9c91601bf46
.exe windows:4 windows x86 arch:x86

9bff3c94da210e55a3150f34303df313

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord644
ord573
ord100
ord617
ord619
ord581

Sections

.text
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE