b8da1d50cc718f5f9963931ca40c8d03 | Triage

Sharing

General

Target

b8da1d50cc718f5f9963931ca40c8d03
Size

572KB
MD5

b8da1d50cc718f5f9963931ca40c8d03
SHA1

099210994abc5ae0db1c61103de6b016fd0afe65
SHA256

12e0e538ea93baf8ab11f4a6688cf8b9dcf2b3d88c0ba9e9b2209b879a56dafc
SHA512

c906b7791680d7a49a58967dde278b59a17a125a7cc8c673e6d331962c647daf9f24cbe8569927ae995842eba0aed96b68aead33c06e71f5fc3f6858f331db95
SSDEEP

3072:aCvYkT+fNAyDG5ek/7I8UFING3CR26DZxAY5ZN/lnK5zTaL2jmsw3/JXJhO4qJ+j:Qa3+1GgEpMeL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8da1d50cc718f5f9963931ca40c8d03

Files

b8da1d50cc718f5f9963931ca40c8d03
.exe windows:4 windows x86 arch:x86

ba7c786094f9d9a4a632b854219e11d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord516
ord628
ord665
ord593
ord594
ord595
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord571
ord681
ord100
ord689
ord616
ord581

Sections

.text
Size: 540KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ