991a3d36ada71b3a7ae84754b755a425 | Triage

Sharing

General

Target

991a3d36ada71b3a7ae84754b755a425
Size

40KB
MD5

991a3d36ada71b3a7ae84754b755a425
SHA1

1787e5de8cdb15c64c4817d865468570ba999709
SHA256

b322ba359552846aa7b4af709152712b5508038e9b50e0e97531a5cbc0f9f973
SHA512

a080d4ea1285dbb556512fa519b33109cdf429dd84d1d812e31109e59c806b53b727bd4c2bc1d119f45785df16e691227a9243d59251ef7400ded956406d8172
SSDEEP

384:ib9eBA8KTyp3T1PSeqdkkgMI1sMIWX3js:Y94/AiP2MGo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
991a3d36ada71b3a7ae84754b755a425

Files

991a3d36ada71b3a7ae84754b755a425
.exe windows:4 windows x86 arch:x86

aa257aac46ec9003f97781f360150352

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
::vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord681
ord578
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ