bb23d35957410ef17d0b76c3a51120dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb23d35957410ef17d0b76c3a51120dd
Size

44KB
MD5

bb23d35957410ef17d0b76c3a51120dd
SHA1

9ffd44a0f0cfa14916abecd600403085d465c6db
SHA256

e590f9d043334a76f44cb3367d32be0a36de2ad9f47e4848fec23b81b2b49ef3
SHA512

a881bd61629925ec47ce6d2d9dc63c3a57783f990838a3cf31d3f45e723814d4af3735b5ea15deadd38e121c0ec1edc961bee2194b23f7b1d59f1c00ac71e47c
SSDEEP

768:4lzgs65RU4T09ioZsuVN1i3/TPH+Hqhz/:4lz7RL9iQNM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb23d35957410ef17d0b76c3a51120dd

Files

bb23d35957410ef17d0b76c3a51120dd
.exe windows:4 windows x86 arch:x86

bc352695b289833b68a2842f0e10f54b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord516
ord517
ord519
ord626
ord666
ord593
ord594
ord595
ord598
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord716
ord534
ProcCallEngine
ord535
ord536
ord644
ord537
ord645
ord681
ord578
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ