98f611e0048fad01d91058294e8be828 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98f611e0048fad01d91058294e8be828
Size

136KB
MD5

98f611e0048fad01d91058294e8be828
SHA1

36670d9ff608cb70c70cae9c134911955f55a600
SHA256

7ddcb94ca35881938e965f74f16f0e190f6f612d87ada004c579262f4e77cfbd
SHA512

c56b173793991bf2336f71e11f9aa775d92cb851428822193902e122bbe2aee446bcc8051fb1fcf4b616777baee4ede62042bedb4f11b773ce657b728ad61a63
SSDEEP

1536:EUvSUDz7YDht9g3BzhIZfNuCDe40KP3sQknafnCtGywzRDLfRYG/J+oHwPZ9d7MF:5XDzEO3BzhiluCDewNSLoqRzGS1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98f611e0048fad01d91058294e8be828

Files

98f611e0048fad01d91058294e8be828
.exe windows:4 windows x86 arch:x86

3f52f9424b5dcdb75a8bd2e3d0155230

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ