97abc7dee2d06f8e1bc896d62f9a9c9d | Triage

Sharing

General

Target

97abc7dee2d06f8e1bc896d62f9a9c9d
Size

320KB
MD5

97abc7dee2d06f8e1bc896d62f9a9c9d
SHA1

5057c5def1f5d98c43b8e3e1a00530d08163e742
SHA256

7bb543533e0a74de6953f1ed5b8c110c818dc3b6cb73c6ce92b5ca43e757049d
SHA512

0152517edf42577845ced2d1741e31ab54d69b940a95896d5ab24c6ea158783793fd11d3e34dc12f7897ffc7099e2465984f3aa9d5434acaa145c57f6f031242
SSDEEP

3072:3c0W7o8SyF/bLegZN4OkqgQKpOqFRdW4FTVEf5c1gMTC:HEfu1J+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97abc7dee2d06f8e1bc896d62f9a9c9d

Files

97abc7dee2d06f8e1bc896d62f9a9c9d
.exe windows:4 windows x86 arch:x86

26c6221681747dbf9b6779f5bd69baa1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord665
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord645
ord573
ord100
ord617
ord650

Sections

.text
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ