b448bc322d804610c61a5d0c90977493 | Triage

Sharing

General

Target

b448bc322d804610c61a5d0c90977493
Size

172KB
MD5

b448bc322d804610c61a5d0c90977493
SHA1

271b2588ec53b7947563a603e1f30f839114f280
SHA256

73e02492ff98566ef577993812240d3a371b484b8d3c741ea0c029c0792cda26
SHA512

b5cf97b116834b7473ace9418789b6c2e315b304d57cef36da0c3bd4f50af8ee0875a43bad0338f06dbdb9e437ef06ffa8952daf21282d7b6b5bdf8fb063c529
SSDEEP

3072:iC6H5Z8DaNytikrMGOTO4YCw0SqTF4GkkY1eKiBKCK1XoX3:iC0ggytL/C06SGkxTuKCK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b448bc322d804610c61a5d0c90977493

Files

b448bc322d804610c61a5d0c90977493
.exe windows:4 windows x86 arch:x86

b9ebe6e78ff159d3c340b31691ca52b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord697
MethCallEngine
ord516
ord517
ord626
ord519
ord666
ord667
ord591
ord593
ord594
ord595
ord598
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord567
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord531
ord716
ord717
ProcCallEngine
ord535
ord536
ord644
ord537
ord645
ord648
ord570
ord572
ord681
ord100
ord579
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ