ba38b6bdd53f8d91d5ed2e3eb906288f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba38b6bdd53f8d91d5ed2e3eb906288f
Size

72KB
MD5

ba38b6bdd53f8d91d5ed2e3eb906288f
SHA1

40b2d532608fa550523ddd8bf0bc516420fa9c47
SHA256

c49ba42e2c1cd0865d5c8fa46ab7757ffc143a3f0e2c2948fcfb964cbb5a8e74
SHA512

c7113db315d477f33fc8f865b81851541247c96a1d66bf19aa480b55edbe44cda669774e8c81b7462322a0d97d4b3e3a3e474fb5e7d512f3b993eb8980d64fc0
SSDEEP

1536:HpYBebJRPw+Aqat2XlhT4l9u5An/hZJmEZS6rWm:HiBetZrLXDTauS/hZJOm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba38b6bdd53f8d91d5ed2e3eb906288f

Files

ba38b6bdd53f8d91d5ed2e3eb906288f
.exe windows:4 windows x86 arch:x86

7c5d6103c5daebd8c466ecf89d588f64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord666
Zombie_GetTypeInfo
ord593
ord300
ord594
ord595
ord598
ord306
ord520
ord524
ord525
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord319
ProcCallEngine
ord535
ord537
ord645
ord576
ord578
ord685
ord100
ord320
ord321
ord616
ord617
ord580
ord581

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ