964f92c32cb139baa76fbb33b37d1453 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

964f92c32cb139baa76fbb33b37d1453
Size

56KB
MD5

964f92c32cb139baa76fbb33b37d1453
SHA1

c30b57e9714675adb81d5be63dd41ddb0603586f
SHA256

2a734c33885d42ab4c5e9f891fb4b14cfc246525e65f0750562aa913879b380a
SHA512

5c4a9dd12546739dbdd12b02b531292dc5e242a2a70d65317db4456dab5dfcffb747ea6bf8d256c34f1e9f1fdd3d830ce9d0545daed921a22b85685547622f6b
SSDEEP

384:HSHLAe/oY06SKOIn6JZ79ppxmZT0M6/NrCBaZaslUntj:yHLAsoirn6D9dSxacFtj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
964f92c32cb139baa76fbb33b37d1453

Files

964f92c32cb139baa76fbb33b37d1453
.exe windows:4 windows x86 arch:x86

414cfefe036f1c608b907a0779e4f306

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60.dll

MethCallEngine
ord665
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord644
ord570
ord648
ord685
ord578
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ