bd83e7840f9256778b0ab9823b318f4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd83e7840f9256778b0ab9823b318f4b
Size

130KB
MD5

bd83e7840f9256778b0ab9823b318f4b
SHA1

87b3a7dc47500e4a153dcd8585b8c2b1da667709
SHA256

bcfb8b919643c6ec122b67b01bd3d7a59d2d278e885331851e30c66ffb506b0a
SHA512

9831f27e62304ce1e49080633efd9834bc5d38f85f4d2ae972bebd84b1a2eca2c8202178889a8a874dc958ae855074fed97d4163f78bcf47e2ed2830d6e77165
SSDEEP

3072:6Hvt4L3XIs1Ex38pxBXSQ3MOijLlLh1Sb8CnuKVH:At4L3Xr+38psn3W8MBH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd83e7840f9256778b0ab9823b318f4b

Files

bd83e7840f9256778b0ab9823b318f4b
.exe windows:4 windows x86 arch:x86

c3c6d54af3f8110936441a02c4c99b84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord100
ord619
ord581

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�F��
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE