b8e7f62c6bec6c0ba189368383cbbfdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8e7f62c6bec6c0ba189368383cbbfdd
Size

44KB
MD5

b8e7f62c6bec6c0ba189368383cbbfdd
SHA1

74dbbb8da8051951f479f45ee90053a2eed69365
SHA256

e89a384e160b64e9d97d93eb1ea2963df6d5260c4251f1a85ac0a93a82be60e6
SHA512

4ca9e9692887d4e9c312a8f0e580aff16adb8282771dd2e39e1123764d25e48eba70f9f502c7fdef040689ecd297faad1fdba213c24eb0bd3d58053a9b945f1f
SSDEEP

768:rw/FqpOwZZmXtJVqRFCZKgJRW5XF3QFoxu+:rw/6X4bJAXFUow+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e7f62c6bec6c0ba189368383cbbfdd

Files

b8e7f62c6bec6c0ba189368383cbbfdd
.exe windows:4 windows x86 arch:x86

88f23f475c8e1e73c39dfb8b2478c97d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord607
ord717
ProcCallEngine
ord644
ord570
ord681
ord685
ord100
ord616
ord617
ord618

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ