bb42e3a501c4d0f9ed17978e3370c80a | Triage

Sharing

General

Target

bb42e3a501c4d0f9ed17978e3370c80a
Size

52KB
MD5

bb42e3a501c4d0f9ed17978e3370c80a
SHA1

72e0e325e523b2446a38a6bdb937c5c1c94ef8d6
SHA256

ca64911882c27481ff1b8401adc825248f0984d0f2078af63829bfb031188488
SHA512

2a34ee9ea44b4ba04ce5c79d684297bc1b547975bfbd91435030d22f0cba16d3d71efd5b4c00af744572939d119be74e0fb7601d08e089ede1eca36067d42d22
SSDEEP

768:Jk2uN/G7eS8c52ll5BIyI3DngWPo5lNMfcszkXcyWCkqHAQIxgusPE0LpF:J0G7d2ll5BhI3Dn/Po5UlqH2mpv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb42e3a501c4d0f9ed17978e3370c80a

Files

bb42e3a501c4d0f9ed17978e3370c80a
.exe windows:4 windows x86 arch:x86

6ecfabab713df0aa44f2dc3e07a2f1b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord558
ord593
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord535
ord537
ord573
ord100
ord689
ord616
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ