98d43d8d3168b9069bc6cf4ddaea72bb | Triage

Sharing

General

Target

98d43d8d3168b9069bc6cf4ddaea72bb
Size

24KB
MD5

98d43d8d3168b9069bc6cf4ddaea72bb
SHA1

300cb9c710a8d0c4891f2e625d2d76c961cde9af
SHA256

602a1a49ae49c14f29e0a30bb8228d5842fba1876f30e2a21d32bf3bc71ae99f
SHA512

811058c7fb596cc600856c5071c913539bf16a7933fda3906078c8459d739b7268b0aa7c055934f7eb65e5922c0f3bc34d08fc554076dd5f46b41f1f8291e97c
SSDEEP

192:+YQcJ6iRfEm3sbxFMfPe6agxpDGwqmlN8Ovuys2z2G2l2Q2n262JaWuE:QcJ6HhFSfPragbwWeWIK3UZWDgaWJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98d43d8d3168b9069bc6cf4ddaea72bb

Files

98d43d8d3168b9069bc6cf4ddaea72bb
.exe windows:4 windows x86 arch:x86

135e7572103e15bfc1ed776b1065c171

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord100
ord579
ord616
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ