961e8ab6b077af228b781e0feb4c9ca1 | Triage

Sharing

General

Target

961e8ab6b077af228b781e0feb4c9ca1
Size

792KB
MD5

961e8ab6b077af228b781e0feb4c9ca1
SHA1

900d04ec6caea24bcfb5b2f6ca739c973f03c4d6
SHA256

441f2df30d6ba3d0127977bbe0d58ffdb19d822878003012e8fe7a4da99ccc93
SHA512

3c139b4c08eea880d2fdb3f98a221af7cf0f2787c72631ee8bd89d5a2f06f11b6fb6fc2e4a53b4618f11c20ea2d58a5d6510119c0110f9f5b9991627d09cf319
SSDEEP

12288:GVhshwpAGWFgOLhT9bZB4DJVpHqe6rpA7pdf8HkbX8Ar2ABy4GFm:GbpTWFRHbzuVarpodUHOsm26y4GFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
961e8ab6b077af228b781e0feb4c9ca1

Files

961e8ab6b077af228b781e0feb4c9ca1
.exe windows:4 windows x86 arch:x86

4333c7cda38451481ad4bf7c3b7ff03c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord584
ord586
MethCallEngine
ord516
ord518
ord519
ord183
ord553
ord660
ord664
ord667
ord593
ord595
ord702
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord561
DllFunctionCall
ord563
ord675
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord717
ord186
ord535
ord537
ord644
ord570
ord648
ord575
ord685
ord100
ord579
ord610
ord612
ord616
ord618
ord619
ord542
ord545
ord547
ord548
ord581

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ