aa9d345f705c3e55d263557873f0f48f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa9d345f705c3e55d263557873f0f48f
Size

63KB
MD5

aa9d345f705c3e55d263557873f0f48f
SHA1

19d9392677c6e1e96de70e78b47f19ccde3bdaa0
SHA256

bad429efc0dbe1e1482c3f61719663c30e6a91d4f6289a5fb998131e233ff2c0
SHA512

b497e3ef2805287dd7738b720de3e6056c1ec9c5e03abe7b6e81eb39f26049dab7b9378ccd8b9ff8dabd35e56ccc24785cd90fe2fdb7c25a51c0097700b5b82a
SSDEEP

768:7NPFqOUq8obnxpb5EXeygSW8TzipTfauldRCsRvMvsS6/IqWvtRNpofM1by:7NPFNUHobnHe1TmIsdjkUUqWu4by

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa9d345f705c3e55d263557873f0f48f

Files

aa9d345f705c3e55d263557873f0f48f
.exe windows:4 windows x86 arch:x86

e011adadfa07c7cdd7feea7c2d15fb1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
ord617
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ