9626768845e19e21fc1d4dd43e1e4653 | Triage

Sharing

General

Target

9626768845e19e21fc1d4dd43e1e4653
Size

24KB
MD5

9626768845e19e21fc1d4dd43e1e4653
SHA1

d5b07b70297f4d80c20af8508bdd2807d1b06052
SHA256

4fdc5a90b968cee5c722c472ec9d27e54c8e054d546b3602f36189b0663774ea
SHA512

f4bceb243f0645f998dd61ffff9518c0b4d833c8a1d4ffa53b6e07bf5a7af432c6ada6807ec10834986af39391b0bae039e5b724adbb593541fcd39539c213fd
SSDEEP

192:CSqG+GCWyUuWEBKfvH7D9M6Ly/6rkmRnTiT5n9MtDyFCivCvl5x5rBxEh:CSkpjV2v7hnRmd9mDyFpvCpzxEh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9626768845e19e21fc1d4dd43e1e4653

Files

9626768845e19e21fc1d4dd43e1e4653
.exe windows:4 windows x86 arch:x86

32acf42d4570f7889ea713ddee025660

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ