b9a6c3d33d6d8b737dd6db0f1bd9fb87 | Triage

Sharing

General

Target

b9a6c3d33d6d8b737dd6db0f1bd9fb87
Size

28KB
MD5

b9a6c3d33d6d8b737dd6db0f1bd9fb87
SHA1

8be9191f6464e7295ab0dd38eefa190ba8e9b94c
SHA256

41eca6ad13ea36f3ca2f9cb4426ac741d73689ededb9100eeedbb51246180801
SHA512

e10fa178f7ac53852248c328b58f07c04c42a70612be2f18790cd98ddc56873462311dc22721f5bad3a3af229ca181452ad717f941ee3166307cafc0bd253cb4
SSDEEP

192:dtzAsyD+4Sq00yqMBiOu2E7+x5m1bBBap8xEE6fO5bn5qzo6qWP7YV3jBU:dxANSKyqMAOgvZsNW5Fn6XGjBU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a6c3d33d6d8b737dd6db0f1bd9fb87

Files

b9a6c3d33d6d8b737dd6db0f1bd9fb87
.exe windows:4 windows x86 arch:x86

f7d50bf6274934215ab1b17a44e0cd55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord589
MethCallEngine
ord515
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord680
ord100
ord689
ord610
ord617
ord542

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ