bf33c65c07e4d040663c42bda3c21f40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf33c65c07e4d040663c42bda3c21f40
Size

250KB
MD5

bf33c65c07e4d040663c42bda3c21f40
SHA1

93c3352b44dd01fd78c076561d77a4bc3be87a78
SHA256

9d81b4ea2b08156acba2c900cdcf6636be5b5635e50fcd7e5ac8ea92ad3af4d8
SHA512

356fefa818c2cf3877da9550944cad351bc111c587699aae76c8ca1181e476d90b7df490dff5df3015d8cde704c5a944d9038d79179aebb86567ab9478e20f00
SSDEEP

6144:za4gqeCZr4CS62sVTS2r47aY4TR1+K3z1m7H7k00aRhydAV:24gqeCZr4Wz7jrd3ybrnhyS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf33c65c07e4d040663c42bda3c21f40

Files

bf33c65c07e4d040663c42bda3c21f40
.exe windows:4 windows x86 arch:x86

11c90c439a3111990f0be4e63a875102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

expsrv

DllFunctionCall

msvbvm60

MethCallEngine
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord537
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ