a34fdc54514df0b19f160ff1d5981629 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a34fdc54514df0b19f160ff1d5981629
Size

128KB
MD5

a34fdc54514df0b19f160ff1d5981629
SHA1

8105b956c9ef93ac7730a97a10c354bb1471ba6b
SHA256

36f462ff1c83efccb2ae02ba9c9af431595c1e23600cbdd00c41c4181038bdb4
SHA512

d939e3abb404ff589dbb90d249df38efabd2a2b2ee19e620a60139e310cffb661b81cb837969fc0b5e4bf509a7fc2b95b5feab2d506dfa42e8f1202fdc7bb118
SSDEEP

1536:TELicCFDqHoGa1ChLyhMGhyfanHJYDKNevwzXD3KGqyka:huHhkChLTanpVNhz7Zqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a34fdc54514df0b19f160ff1d5981629

Files

a34fdc54514df0b19f160ff1d5981629
.exe windows:4 windows x86 arch:x86

1a3e7aaa45dbcbf9c82517a80368e3af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord187
ord587
ord697
ord698
MethCallEngine
ord516
ord555
ord300
ord301
ord595
ord702
ord598
ord306
ord307
ord630
ord709
ord631
ord524
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord536
ord644
ord537
ord648
ord575
ord685
ord100
ord614
ord616
ord617
ord546
ord547
ord581

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ