ab0b41f310bba0e7d9fe373e0a14836d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab0b41f310bba0e7d9fe373e0a14836d
Size

48KB
MD5

ab0b41f310bba0e7d9fe373e0a14836d
SHA1

a6e8f1cf225bee29c6481b75eacc6a5de5d98fee
SHA256

3e0fecda8368f633fbce646ad72f1a13b1af85e9e7ecbd37f24916c4fa88fdb1
SHA512

89bc3df36814c9cc69dbb9f32124debcd25a5a376ebf6c78be8223e73b3d30d06a5bf6cc6792b9873617c1b07ee949ee7361aff13658e9d801c56bf968847928
SSDEEP

768:EdABCcO5EyOVHQjPAb2JrjgfTlOgnIRN/uAjnuZP:YRcO589qRrj6xOdRN/Nu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab0b41f310bba0e7d9fe373e0a14836d

Files

ab0b41f310bba0e7d9fe373e0a14836d
.exe windows:4 windows x86 arch:x86

87e6d7b8534bb4705ea4888ffdbe7955

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord187
ord586
ord588
MethCallEngine
ord516
ord669
ord593
ord594
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ord318
ProcCallEngine
ord535
ord536
ord644
ord537
ord645
ord100
ord689
ord610
ord612
ord613
ord616
ord580
ord581

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ