b8db27a50495501cdcaa43d55b34db98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8db27a50495501cdcaa43d55b34db98
Size

420KB
MD5

b8db27a50495501cdcaa43d55b34db98
SHA1

31fb57734c89761b213f390ab9ef81b05d64204e
SHA256

ec53c255acf232f01eba2a0ffd7baa86af389b79dec978f2468b72b88dcd053f
SHA512

1d5a79e978bf3e5f4e509ff38ebbb111e93a0c3147d2e28d0873d74b058e18710d118e31b1fd968cb0a86ce920f5fe0ed05ce43f5510c1d0a6a0b3ee8da71a28
SSDEEP

1536:rQVgd54vk5VZcQyAaLSokMJ76KNMX+Ev2W54vTgzQq:rL7TTJ97S6KNMX+EOodzR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8db27a50495501cdcaa43d55b34db98

Files

b8db27a50495501cdcaa43d55b34db98
.exe windows:4 windows x86 arch:x86

5e9b446af662287109b36abfbfeb116c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord576
ord100
ord617
ord542
ord545
ord546

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hhqg
Size: 192KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE