a1a518eb7c13277d2147e899b68aec60 | Triage

Sharing

General

Target

a1a518eb7c13277d2147e899b68aec60
Size

72KB
MD5

a1a518eb7c13277d2147e899b68aec60
SHA1

f99fd79f427c26b5fdef0e4f9d0b50fa6f865a13
SHA256

754c7c82c94900417c698d7b750bbda5eb569351cdf754fb31a8e5970c92d292
SHA512

6cecb186aa7ae0966f881d9b72347cf5428ba64b6431f91bd3ce94474f9075e4258402124a6d3d5540c1c74b52fe53e33e34b5ba4086f2547a91b421a591af13
SSDEEP

1536:isw0wcLxoge4P/iru9JWx0aO9e4P/XYlLu0wvP:o0Bagee/iC9J8O9ee/Xmu0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1a518eb7c13277d2147e899b68aec60

Files

a1a518eb7c13277d2147e899b68aec60
.exe windows:4 windows x86 arch:x86

aacb4a521b99d0c816d7fbe2e6ca1297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord667
ord595
ord598
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord531
ProcCallEngine
ord648
ord681
ord576
ord685
ord100
ord616

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ