ad69081e840917dd0db8cac5b9b5ceca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad69081e840917dd0db8cac5b9b5ceca
Size

60KB
MD5

ad69081e840917dd0db8cac5b9b5ceca
SHA1

b3f7086eef72318a9b839ad4fc8977a2aa42520a
SHA256

2c5d1a58da144e150d0afad23aafd11020f60016d02a6f3b396d607d59817706
SHA512

e18626dfbc542ec8fb0f4fae3e48565aa74d7a0d6ebdff1295c3973037cf5f6c152ac6b163bf01c6645cd6d992df44d4a0413c4c69043155e821626903a670d3
SSDEEP

768:Xkzz0rm9xJPtI4zzvrbwC33b332LPgwhqPGdSksG+YRkXIoDvjwB0SNGBZSw:AjjkCnbnWtyk4+k4obeZMBcw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad69081e840917dd0db8cac5b9b5ceca

Files

ad69081e840917dd0db8cac5b9b5ceca
.exe windows:4 windows x86 arch:x86

fb6a6c0dc7629d09448ed24649b9ef07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord618

Sections

.TEXT
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ