ab1124c9ff0e514276b685fb384a71af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab1124c9ff0e514276b685fb384a71af
Size

624KB
MD5

ab1124c9ff0e514276b685fb384a71af
SHA1

802016ff072b9bf311cfdd24ad12248da7023252
SHA256

33f2d220fe3be2e5f789c81a05a5962129d47d292e8054513fccb3d712b2b2a3
SHA512

c4a52818afceba458e0b1b216ce140862b2540b7384cba711038e9cfc6f82cd547185a214bad6da1a5e339342abede303a2a4c22ef8547d3a2cf7035585b0d3e
SSDEEP

12288:gQR6cpYL1jg9KRk8hvEncQ5ygPFO3Ob6GLE0kuGnESBG:gQR6c4s9y/vEncQRw3ObPMtnESw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab1124c9ff0e514276b685fb384a71af

Files

ab1124c9ff0e514276b685fb384a71af
.exe windows:4 windows x86 arch:x86

4a6e563790823ad550563cae8a6d270e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord100
ord619
ord581

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Metralh
Size: 504KB - Virtual size: 4KB