98b38200f3ec875c7ff23740464c2951 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98b38200f3ec875c7ff23740464c2951
Size

60KB
MD5

98b38200f3ec875c7ff23740464c2951
SHA1

d698ad7d59bfe1566bc2e3683f57763213f533c1
SHA256

592817397913d669a92d8bd4f595a6ee1c01c29e0233c5458ab5e81ebc3e4b49
SHA512

29b20dae97f69a3aa06345635ca3dc99e88a9b98495f0fec0347e61cc96eda8e17fe176eb8753526c7017715594c42f284450c0695609b60b39248ebb5db3fa8
SSDEEP

768:L2dtp1aVA22+34NmKcQXv2MVC0yirNaSN4kavEqiDTLzCYIENxnO/m7nriBBsh5+:iaSN4dvEqif/CYIENhOeILaQKgZh2V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98b38200f3ec875c7ff23740464c2951

Files

98b38200f3ec875c7ff23740464c2951
.exe windows:4 windows x86 arch:x86

b83ae87af9f362d9feff5884d0ce7fbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord669
ord592
ord593
ord300
ord594
ord598
ord306
ord520
ord709
ord525
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord314
ord606
ord315
ord607
ord316
ord531
ProcCallEngine
ord535
ord644
ord537
ord571
ord573
ord681
ord576
ord685
ord100
ord616
ord617
ord619

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ