ad20935aeca5fe11e6914ff92dbe5faa | Triage

Sharing

General

Target

ad20935aeca5fe11e6914ff92dbe5faa
Size

48KB
MD5

ad20935aeca5fe11e6914ff92dbe5faa
SHA1

1729cb11fc2b708f600e5e906bacb1010c0a9719
SHA256

4c710177c9e733ac039d4d032805b115b20fc1592b43731b0a29425c03498712
SHA512

562ad8c979031291cb194ca5642529ebd166aefee84577c76f820b46cd9e98105cb689f5cb217c28000350cb4285f4964245cdd629ff5cc02b99d1c0670b4854
SSDEEP

768:DzfSjQMRhIvbf+mtsEI24MzVWPt/a8cEB5R:Pf+DIDffLJ5+a8zb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad20935aeca5fe11e6914ff92dbe5faa

Files

ad20935aeca5fe11e6914ff92dbe5faa
.exe windows:4 windows x86 arch:x86

3bab093e2112d8d146fc19cb180927ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemFree

oleaut32

SystemTimeToVariantTime

kernel32

RtlMoveMemory
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW

msvbvm60

ord690
MethCallEngine
ord620
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord570
ord648
ord685
ord100
ord689
ord616
ord540
ord546

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ