ad65879ec4f88c6c857a7c88d682bc78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad65879ec4f88c6c857a7c88d682bc78
Size

52KB
MD5

ad65879ec4f88c6c857a7c88d682bc78
SHA1

e173c12e977562b5b9604ce6046917b05c51ddd9
SHA256

715aa7d99463fecfaf3c58001c843022ec9f6e9b821c96ceac79374ca4e55e27
SHA512

346c5d4dfd0612af76ea8cc95be28240617e21d6b277bd1da23d5032ddc17aa3764f90f77897fb8a69ed1cf04ddc60168fccab9fac0b860e15a9efffae3d516f
SSDEEP

1536:oxvCDGJ7yGXHjVmQIe9C0gMtlWhhHnDHCSUeeEX33333f:y9jVmQImC0/tl8HGSUeeE/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad65879ec4f88c6c857a7c88d682bc78

Files

ad65879ec4f88c6c857a7c88d682bc78
.exe windows:4 windows x86 arch:x86

f4b19315fa9110816b5afaba49107e05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ