996a9a7f25411038ded47893f76a1354 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

996a9a7f25411038ded47893f76a1354
Size

36KB
MD5

996a9a7f25411038ded47893f76a1354
SHA1

c7509854b2293aaf9aceb295f8a624440ab3859a
SHA256

4b9359fcba4750a4d62d39b1c8d1d04107cf3138532e8068c7df949a3b98a92e
SHA512

ba5f366ba57288aec08880084d4ff8f074b253f01083590802bcc1fc688767bed32a9fd8c3940fcdd6c53922eb7390cc5c9dcbbff39bed45488475f9fd928d8b
SSDEEP

384:tP4jWhtlSp29MtBlBG6RrCiUXqXUIu/2iHJ1SzMS916bIH4NzDrtzqO3Kwwa:d4jWhnSoGlB1fDg+DyCa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
996a9a7f25411038ded47893f76a1354

Files

996a9a7f25411038ded47893f76a1354
.exe windows:4 windows x86 arch:x86

70112190b469adc32ba0e884aca25dfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord645
ord570
ord685
ord578
ord100

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ