9a40b0c38005b89fd9a60c7b3f42be53 | Triage

Sharing

General

Target

9a40b0c38005b89fd9a60c7b3f42be53
Size

24KB
MD5

9a40b0c38005b89fd9a60c7b3f42be53
SHA1

1999992256bc60052128bfcbcd0e1018a264fc81
SHA256

48ea08e4f6b62954416851ef80b15cde5b0bbdbe1f8ded3a445708355f5da601
SHA512

fb143a7f4bef13c43eae25242c0f5a5a156bd63a7a9d4cb4795ec04fff3edd02c559f52d724688d07eb8ea9f4d177896312bf1779159b42e60cf3c19899f7ce8
SSDEEP

192:h86ZgwiSxaXGSBGpk8+ROXI39zF7MFJcSD03jADFltlbfeSa+mhj:h80TwcKyYF7MLGhhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a40b0c38005b89fd9a60c7b3f42be53

Files

9a40b0c38005b89fd9a60c7b3f42be53
.exe windows:4 windows x86 arch:x86

088d3f1ebee7129b31a03bf107c0bb29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord613
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ