97b4847fa3f0cfc58fa6036005fbd776 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97b4847fa3f0cfc58fa6036005fbd776
Size

24KB
MD5

97b4847fa3f0cfc58fa6036005fbd776
SHA1

77bdae0adf72926bd79dff40b58d6ec2a133ee69
SHA256

a7c03af148392929506b4f6a85c8bf2b526e03cd0ab644cc973e10df151f8e15
SHA512

b25f5cc8722e76168350e5f8078d7cbeb862f25dff04a9b420e2db08d481de529b8b7f868b0f0e84007dd2da3cd54de0c1a56e356a8547b10e8cb8dd8fc2d95f
SSDEEP

384:DZ9M0da/f+pYLELqARXzeMlZAC3zzPik9QdlHmzTGf8r:D40da/f+xTAC3zzK9QzTGf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97b4847fa3f0cfc58fa6036005fbd776

Files

97b4847fa3f0cfc58fa6036005fbd776
.exe windows:4 windows x86 arch:x86

ba838f6e2a2145d0f7846ff38c0ccdc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord593
ord594
ord595
ord598
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord648
ord576
ord100
ord616
ord617

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ