9a7cdeda85c35cafb80ed38ac40e6f6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a7cdeda85c35cafb80ed38ac40e6f6e
Size

367KB
MD5

9a7cdeda85c35cafb80ed38ac40e6f6e
SHA1

0f975e37a8fe7d949a73e81a08dc5b440ceffafc
SHA256

6c6fcf8fd9507f85494bf5cc1f53968b1ac3f31aa3960de8320f90397a7e43e5
SHA512

22a52cb2de26bec8cc565b3fc27868ed65bd53748c17589cdbbf63ede8967835c9b44d916e197ac566adfb7ce8d8e76db7888341661595f4cbd7edad2aa1603a
SSDEEP

6144:GZjS3WnWAfZFLOt/v+7KNih8C5B7hzb8kMkD8AOnaC50+Uv9BoNCVo4DKhfK4u9p:/W5f3aB+7jhB9zb8L9QC54FBoAzKhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a7cdeda85c35cafb80ed38ac40e6f6e

Files

9a7cdeda85c35cafb80ed38ac40e6f6e
.exe windows:4 windows x86 arch:x86

92a0eac470a7d6de2be7294659c0b8d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord595
ord303
ord309
ord709
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord573
ord100
ord616
ord617
ord650

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE