34e5afe5d2502f0871b55414b4225898098596d6f9057db57ff1792b94857e1c | Triage

Sharing

General

Target

34e5afe5d2502f0871b55414b4225898098596d6f9057db57ff1792b94857e1c
Size

116KB
MD5

ab4a1dfbaf0996b219871f2a04c3bb57
SHA1

9df094c3b5212b228b53605c2aa67cc32819b6bf
SHA256

34e5afe5d2502f0871b55414b4225898098596d6f9057db57ff1792b94857e1c
SHA512

aab7f9117dbc4c8eec4fa5ae2fd2297461f752e76477e196d3281d7eb4585536dd518b5338636710c574e56662207014b2872969ce922d2c731a2de2f8c75109
SSDEEP

1536:FobjIuVU67gccYy53JDAAZpW4oYkguW2z3i6E2wNI7VnHLl7dbE2I1JQ:6bjIQU67lguVHLldQ2IQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34e5afe5d2502f0871b55414b4225898098596d6f9057db57ff1792b94857e1c

Files

34e5afe5d2502f0871b55414b4225898098596d6f9057db57ff1792b94857e1c
.exe windows:4 windows x86 arch:x86

f24f0e158e2241432ff1823f425473c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord695
ord516
ord517
ord518
ord520
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord562
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord530
ord717
ProcCallEngine
ord535
ord644
ord645
ord647
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE