9bb0b89640b6d6738d86cdbb6d127153 | Triage

Sharing

General

Target

9bb0b89640b6d6738d86cdbb6d127153
Size

152KB
MD5

9bb0b89640b6d6738d86cdbb6d127153
SHA1

ca524126d6af76681d94bbb79230bdc411a6ae02
SHA256

2da9ce98924fa38beafeeaee10b5a529063b9027920b0b8d3846c41f0e2dee23
SHA512

e2087e9f9c5e5b07881b4a92bd5b2b50cbe28d0e4bdd155da1b18cff07bf7ab979dfbdaafd4d05a6bbbb4497532baca9c8e3c7a8d79a6b8d6d75ad634f014b04
SSDEEP

1536:sy/8RZ865JlPRUqrO5Igkb4Jsy91bI6Le:syko8+qyu/b4JsU1kOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bb0b89640b6d6738d86cdbb6d127153

Files

9bb0b89640b6d6738d86cdbb6d127153
.exe windows:4 windows x86 arch:x86

2afdd4f403a3ad64c6c4adbe1d38a60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ