980fa02d5b0eac574610da81e3d2b085 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

980fa02d5b0eac574610da81e3d2b085
Size

80KB
MD5

980fa02d5b0eac574610da81e3d2b085
SHA1

bc12ae643bf46ac43923425cdfa75c22db750952
SHA256

0140f51c12338790c3f155174fcb009942f328cc814a6cc1008a53b5277b872e
SHA512

9a9d0b65e93fb761356c34da64027dfd98f386988c9b487456fef6adfcae4766b9d65b5fdb20b6965c791e7a13705dd3102ab87a15a085ab42402c5ce538b98e
SSDEEP

768:OOOmr8bPq+fetVVCXibUlYmL1Zc+5aMy6n7nBCJ1h2wmBMG3yQ5q/08EsCeMiu85:pOy9BT8P59X7nzwmBMGm25l1r1Wcb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
980fa02d5b0eac574610da81e3d2b085

Files

980fa02d5b0eac574610da81e3d2b085
.exe windows:4 windows x86 arch:x86

f40f465ab007fb8487cbfa4dae092503

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord626
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord301
ord595
ord598
ord307
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord319
ProcCallEngine
ord644
ord573
EVENT_SINK2_AddRef
ord681
ord685
ord100
ord320
ord321
ord617
ord651
ord581

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ