ac9dd42bf3e767d5a6de421ffc6c050c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac9dd42bf3e767d5a6de421ffc6c050c
Size

40KB
MD5

ac9dd42bf3e767d5a6de421ffc6c050c
SHA1

8109eba8c2c57f7a0c9e43b4a215ea6af8de323a
SHA256

7d130eb67f541c3765bf38c1b9d2d95107b6ac5fca1d5ae70258e26fb706d363
SHA512

305002c67accd840cca9be3377ed6670011932181f6a59de4905eb4bb4209397cf4ead0f358d7850f14b1bfb552d5ac69708e2ab9b4fbcc745eca870fda34e61
SSDEEP

384:OavxkfFShu+lbSslK0U0Mvoqcl+9HHusyKK79KFLULXAqpHpIJf:OavmShcs7RMwJOnBK79KLCzJIJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac9dd42bf3e767d5a6de421ffc6c050c

Files

ac9dd42bf3e767d5a6de421ffc6c050c
.exe windows:4 windows x86 arch:x86

e5c8aee02ff0fc887b93f482a6327f9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ