b9a592b1577a64981f6b18d4d8747296 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9a592b1577a64981f6b18d4d8747296
Size

76KB
MD5

b9a592b1577a64981f6b18d4d8747296
SHA1

6a38eab047edc9b89595340d9d32586ab9975e92
SHA256

2edc9956921268fd5d3d25b232f461907dd1f8329d1b0ab878a2b7537ec1cb84
SHA512

c410058f30ed6cd06c3fca07fb50542555603a63d621736b0443b37fe8b66b5c744ea498bbdc54613d473ea8956f0141f3b35037647fcd4ab59cf9f85477d29c
SSDEEP

1536:p0gIhbHrGeqDf6r419dWGeQ0gIhbHrGeqDfBD:p0Thj6eqDN1L8Q0Thj6eqDZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a592b1577a64981f6b18d4d8747296

Files

b9a592b1577a64981f6b18d4d8747296
.exe windows:4 windows x86 arch:x86

ac461fa3ef39be80df634ad334882ed2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord576
ord100

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ