9a4a00dab3e7cf1677adf4f9ae6a4031 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a4a00dab3e7cf1677adf4f9ae6a4031
Size

24KB
MD5

9a4a00dab3e7cf1677adf4f9ae6a4031
SHA1

6e04636a767c88bbd05a9de4da0c4997a36acd97
SHA256

30d849db47ab94b96ae22428305466cf99f74f825c49ac2833f072fa8c90b97d
SHA512

140892ecc123dad1db3defb141b9e4c151b79065bb6afa0ad9b988ab6e42b134adeec4b9c080615a39deca173c4f007e2451457acf7f8aa39c2e66eb0e3ac2d0
SSDEEP

192:T2ExiBSt5hxkp1WmeuDECS3LNcI+hOqn4q+Secoy6Bq430PxbV2ihnDjAfRC6xPc:THxi0t5hxkztONcI8WU4yS2PxbVzaXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a4a00dab3e7cf1677adf4f9ae6a4031

Files

9a4a00dab3e7cf1677adf4f9ae6a4031
.exe windows:4 windows x86 arch:x86

f25b4a66a2a4330335746713b5da3b2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord517
ord666
ord593
ord594
ord595
ord526
DllFunctionCall
ord600
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord570
ord578
ord100
ord616
ord618

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ