b9f585a19fc23d16132953f344ff33e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9f585a19fc23d16132953f344ff33e4
Size

52KB
MD5

b9f585a19fc23d16132953f344ff33e4
SHA1

dcc0e1e64a0f74bcc809f59e36f20bb477700900
SHA256

62c74781024db4599a4624d7a53d01c9da4d2ddc78fc86b59de716b384b5beef
SHA512

4068b100557d5141a85232267fa427220817f124c14959d5e5b8b629c0d32de975fd4db2c73f62a80bbcb9308e2060216705e6c1c7fb9e142ad11f6705bf5525
SSDEEP

768:Uxpu7UuPd1O2XHlGC3HHDiBh8GwUoRnj58ggbsBYWriGVFhHYYQfqd2fW:spRMHHDQwHR9+oxrbfhhQkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9f585a19fc23d16132953f344ff33e4

Files

b9f585a19fc23d16132953f344ff33e4
.exe windows:4 windows x86 arch:x86

1c9ccfedb9df52177f792c92b79204d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord626
ord666
ord598
ord526
DllFunctionCall
ord563
ord670
ord601
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord100
ord616
ord617

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ