aba036b30d43d2d33fba477657c6d856 | Triage

Sharing

General

Target

aba036b30d43d2d33fba477657c6d856
Size

264KB
MD5

aba036b30d43d2d33fba477657c6d856
SHA1

67073213a9a7fee09f63f678aa548725bca5e81f
SHA256

26ad4e94f96f253d5d388f2b0b98a7c2d98a483d21cd3037337bbdfd9007db6d
SHA512

92e99258399b228bd548b55cca51f22bef9a0a4ce0422319fa02728fb0978e55db06064010d73315e3dbd2e1a98bba4a8f6e2c29c039161535c5a3dc4f75159c
SSDEEP

3072:t2S+M1SE19nU6gVmqFbwyQe9GU5D+tB7/4AMcWyut5UHOykG599yncDHSb+Ks5:bSE1anVm4ZueHb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aba036b30d43d2d33fba477657c6d856

Files

aba036b30d43d2d33fba477657c6d856
.exe windows:4 windows x86 arch:x86

3567d385dc161e757e0b6e41432be79e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

adqwer60

MethCallEngine
ord516
ord593
ord595
ord598
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord100
ord616
ord581

Sections

.text
Size: 256KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ