abf08f07efa8db5654e709426160725d | Triage

Sharing

General

Target

abf08f07efa8db5654e709426160725d
Size

60KB
MD5

abf08f07efa8db5654e709426160725d
SHA1

8318d4b8d669de17574ea4d593b3dfaf900eb6c4
SHA256

d4d6f89b7199b007643cd661ce2674353bda468adb9a306e1acfd1240238a5cc
SHA512

9f18d87ca29f1a64349d2a0e5fe18150c4625775c79f01c71e04113618bb108ffacea28fbe434eb6802e35c7e0d169548925d145f841ed46e3a07f6eed714728
SSDEEP

768:vXKKOM9rPeD0nD+iWHTiOHTZbO0lBoBadfouomqiD7bcYq6oW1GOUqyhpQQuIXj3:/gM9T0SD+iW+4Y4kjp2lKw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abf08f07efa8db5654e709426160725d

Files

abf08f07efa8db5654e709426160725d
.exe windows:4 windows x86 arch:x86

e6033662488a22a8f41039ae1b3cbb7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord525
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord576
ord578
ord100
ord579
ord612
ord616
ord617
ord619
ord544
ord580

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ