ba190b4e8a17c347a970e7af3673b159 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba190b4e8a17c347a970e7af3673b159
Size

20KB
MD5

ba190b4e8a17c347a970e7af3673b159
SHA1

a4b83d8b537086d61efa70a000e9b27b353b6a93
SHA256

7b92803ed4d1b4649b9f50fc772948a411fc996615925da9e74a13fa86fbc43a
SHA512

3fbe80e25453482e71e9b8e671a6699f2e0be00a1cf0e0daacffbfbf2a356b895931e10f99dffaf4b7d3047ee14372a6df2f3b4c0975d0e72ee5970bedf49685
SSDEEP

96:PxaPy0uvl0nLnsJYT7YhQT8861xwMIU4vuIeDmrtc9u3uuG5ZMPM0IqKEn2:paMl0nL3hR+xwM54WDZdR5ZME5qFn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba190b4e8a17c347a970e7af3673b159

Files

ba190b4e8a17c347a970e7af3673b159
.exe windows:4 windows x86 arch:x86

f7e02abc8811778ef14ffc60f6e63181

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord593
ord594
ord520
ord632
ord526
ord529
DllFunctionCall
ord670
ord600
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ