bb316feeb6dccf6578af3fd35d56e72d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb316feeb6dccf6578af3fd35d56e72d
Size

12KB
MD5

bb316feeb6dccf6578af3fd35d56e72d
SHA1

57d928477ccfd39fcc5a6b750009f40a40ab5a30
SHA256

e8a9e67a78c991c99dbe7767ea74e85faba4798c3fa53fa9a910695e6a25b6d1
SHA512

09bb99cf230e3d970958204336d80224a69e53014b02063846d4849a442d90fa801bd0e11c182d4d24f47fce7d09219f0d38996e335971560c7912de5e6abc30
SSDEEP

96:TUcaK9N/U0lKGhM74TuCPEe/UqzHN3dTr/5/5tG5XW9QXIemlTKdYS7sw4tJLkfp:PvU8dD/pL9dTr/5/e5G9Le97H4tJI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb316feeb6dccf6578af3fd35d56e72d

Files

bb316feeb6dccf6578af3fd35d56e72d
.exe windows:4 windows x86 arch:x86

9eee87efaedeee272ed8ef6cce4f6e24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord594
ord631
ord709
ord632
DllFunctionCall
ord670
ord600
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord570
ord685
ord100
ord616
ord617

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ