adda6a368e530215ab64c0697d72858d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adda6a368e530215ab64c0697d72858d
Size

134KB
MD5

adda6a368e530215ab64c0697d72858d
SHA1

a3980b7f857729fdd111eeb9056129041750d97e
SHA256

ace1b802dcbc31e4744d0b640f230b938c9a666bc65bf6e37e92bf967fddeaa4
SHA512

b0fee19e987b2d771ba24c31ea8a3b264b67988164a73ed84efa728583560ed75e02ec5b9ab6eab176d70c0534cb46840b9496a96d0ae60af92f4aadd59e7b2f
SSDEEP

3072:kUGTaiwM7tFOiWgU9oiZthCg+A713/NPvZWAu6+NBLIh:kp+51vNPhWAu6+N5M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adda6a368e530215ab64c0697d72858d

Files

adda6a368e530215ab64c0697d72858d
.exe windows:4 windows x86 arch:x86

b4a5a56c4352689fcbd5d7e84ebb4a97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord626
ord554
ord593
ord594
ord595
ord598
ord520
ord521
ord522
ord523
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord712
ord606
ord607
ord608
ord716
ord534
ProcCallEngine
ord535
ord537
ord645
ord648
ord573
ord576
ord578
ord100
ord610
ord612
ord616
ord617
ord542
ord547

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE