90156f392735dbd323d96b432d2738a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90156f392735dbd323d96b432d2738a7
Size

284KB
MD5

90156f392735dbd323d96b432d2738a7
SHA1

6c35d31770502ef46fc20a44ade1ced8c553bc78
SHA256

e75db458244687598e37657e145aedff329ce564dd43b56c38aae9b2b45751cc
SHA512

a08b31a56f0b03372946163e2e231f1216dced425258ea5cf12e3b0a75d2d29c6cfc747b7d7b2daa68d6c25eb8f8e43076c600046bd4721b90bd84bd907b5c66
SSDEEP

384:LWE3JwAV+ldBXkyEZLPrFKFlBY605CdQvo+TI8xZCdzs3MKsm9jjpC53C/+ZnOrz:SE3JwAA/Xh22YqO91VRJtK1Km1Al

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90156f392735dbd323d96b432d2738a7

Files

90156f392735dbd323d96b432d2738a7
.exe windows:4 windows x86 arch:x86

6439ccb892f285ee92ab885871e1dbe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ