bbfba935d3e3abe8e27fc686ac56951a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbfba935d3e3abe8e27fc686ac56951a
Size

96KB
MD5

bbfba935d3e3abe8e27fc686ac56951a
SHA1

61e556f236ebe89472dfb29fdfdb27d94a0389b8
SHA256

e7cfa0982c3add64c45229493ca866c86d5e80ec9050582fcc423a298e1762c2
SHA512

143c2fa0c31582ce2bf6b0333b9930386ffad3e31db2cacdc4afbed4e7d1492db6bfdc5af29f0a32a4e52243900740f2e788d5ee429afecdaf6b64f60e3004dd
SSDEEP

768:/eOrpP7UoBHdKP0ulWK1pOyOXv+y+7VqCNvIAL7c+R8vhy6FnwgJDtWle2pzkExs:/Nl7UAHdSGgpo/1Q6ezKH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfba935d3e3abe8e27fc686ac56951a

Files

bbfba935d3e3abe8e27fc686ac56951a
.exe windows:4 windows x86 arch:x86

e7b2d81a8f4d404cda74060c8ea7cc0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord516
ord517
ord518
ord301
ord595
ord520
ord307
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ProcCallEngine
ord537
ord570
ord648
ord571
ord100
ord616
ord617
ord618
ord580

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ