ba9f1656823d09c657850354f861ee04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba9f1656823d09c657850354f861ee04
Size

100KB
MD5

ba9f1656823d09c657850354f861ee04
SHA1

2ce2578b072bad31d8113ed95960d9d8952a087a
SHA256

476c618301ee8fd5d3238a117f3c6c8af65749c7adf49814577674488def0889
SHA512

8fbef4d5b4b2d8eeb8bbb9017d8a823c5d5e0535b7270ae200f0fe357d3739844c14539528565df954409627ef7778b8c056982f428e5c9658bcdc28b8987577
SSDEEP

1536:q2jbpy9ddd7Y1idNzL7zdddXOpdxCTkUjW/dQqdUxpkddAd3nddd4od5ddMk5dSs:Tjbrez7GBTzFJ0T729r6h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9f1656823d09c657850354f861ee04

Files

ba9f1656823d09c657850354f861ee04
.exe windows:4 windows x86 arch:x86

cfc01f7fafaef2a7132016def2159ffd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord585
ord187
ord516
ord517
ord518
ord669
ord520
ord709
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord681
ord578
ord100
ord579
ord616
ord617
ord619

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ