99d58ef0231f2fde1e873a055a1caf08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99d58ef0231f2fde1e873a055a1caf08
Size

164KB
MD5

99d58ef0231f2fde1e873a055a1caf08
SHA1

28d84e53629c88d76517a81af7a3e5a28a17f643
SHA256

8faabf39641c1aec1b68beaa082fb0732fe82e09bc3e0209ce6b9f9421912e7e
SHA512

83b05fe1d02ed48b6e174dec83c0cf880ba6be9c2b8a734acb7461b0e5b0117275438c8388f6284d507068db4e8e3ef006e07d30854b141a43633924a4cc858c
SSDEEP

3072:tXSEd/mJzHiKKJvN5+eEIbHzl6zQsk4RWQHAL++kkfCzR:tPd+JiJFUeFTl65RUfkkf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99d58ef0231f2fde1e873a055a1caf08

Files

99d58ef0231f2fde1e873a055a1caf08
.exe windows:4 windows x86 arch:x86

2ed59a74ad1b3c356fdf635ffbdf41f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord585
ord586
ord587
ord588
ord589
MethCallEngine
ord554
ord557
ord665
ord558
ord669
ord594
ord595
ord596
ord598
EVENT_SINK_AddRef
ord560
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord572
ord573
ord575
ord685
ord100
ord610
ord612
ord543
ord547

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ