aadbff7ec7b00db9b255bf0f81cd1ba7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aadbff7ec7b00db9b255bf0f81cd1ba7
Size

164KB
MD5

aadbff7ec7b00db9b255bf0f81cd1ba7
SHA1

ad78f91f87ba300bef7ea0a3fb03e868d3d479d7
SHA256

b046efd38f8258607fc48ce654e222c0579b999a53f8f2bfc6bc61b5ab2fb157
SHA512

6266588335868a1a0625fd5cde1c1bb9e00e4951069a0738a05d2ba9fdc04db685a0e71f5407dc1cec4cc806773f03d1678d014ec3f3234176c720bb5849b790
SSDEEP

3072:8Jxz1ZOo7VG0t/J2MibDpTKiOjZDw7ddKV+o+xP4usXd:87PVdxJkpTKiOhwJd20PLsX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aadbff7ec7b00db9b255bf0f81cd1ba7

Files

aadbff7ec7b00db9b255bf0f81cd1ba7
.exe windows:4 windows x86 arch:x86

1c2a9a32603e58c828142b68f4613c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ