bd60671684d0b7afdd542dccac18ad53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd60671684d0b7afdd542dccac18ad53
Size

72KB
MD5

bd60671684d0b7afdd542dccac18ad53
SHA1

431734d4e2a543727bd6abccb8cccf2a50533a40
SHA256

cb99f8a0d56de1ce09b2cdf91bf36f2b0db36e0a0567c9f7440729faef280507
SHA512

14d46bcc84f9655437d5daf2e55f3b65c2e8e6ec7c584fbe3cd087f21abefc1209bb8ac87ede6072031c5df03c7ea1158f0ab04e5745547f24cd17098304590f
SSDEEP

1536:0xbxTWslXg/uOzlha74l9u5An/hZtmEZS6rq:0xcNBzDa7auS/hZtS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd60671684d0b7afdd542dccac18ad53

Files

bd60671684d0b7afdd542dccac18ad53
.exe windows:4 windows x86 arch:x86

7c5d6103c5daebd8c466ecf89d588f64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord666
Zombie_GetTypeInfo
ord593
ord300
ord594
ord595
ord598
ord306
ord520
ord524
ord525
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord319
ProcCallEngine
ord535
ord537
ord645
ord576
ord578
ord685
ord100
ord320
ord321
ord616
ord617
ord580
ord581

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ