b75c345a67797905a86d3d84b44703e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b75c345a67797905a86d3d84b44703e1
Size

22KB
MD5

b75c345a67797905a86d3d84b44703e1
SHA1

224284c517214ed1b7f49faa711ad15afc7390f9
SHA256

7fb82ac9418a6ba7bbf079a3d192e8067a3167a59aeae4b13429833c7f2dec14
SHA512

1e045a3d8ba5f3578afaf366a1f54ab5ea18f8a6f74914787e436ed2943e73632455f12076328c07d2faa48e11f08e1133f46abe774dd2948be9a7274ac5cf96
SSDEEP

192:rKF6iGugtaQdPyV5QjNC+4b5kAlNBPBaEeXy0cwFKwV9dg9:rK45JthdPyV5Qb4bqAlNvNev1u9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b75c345a67797905a86d3d84b44703e1

Files

b75c345a67797905a86d3d84b44703e1
.exe windows:4 windows x86 arch:x86

5ad2ebf067a137a5fe8ae1a1ecba87fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord648
ord685
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ