bd89e31f81399a107855c7973494ec22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd89e31f81399a107855c7973494ec22
Size

176KB
MD5

bd89e31f81399a107855c7973494ec22
SHA1

cb87a21e5691348bc4453d2dba92fe50055d0a24
SHA256

cfe11a82dae4ffb352beffcdc73bc2fa57be3e2134d782ded8d448fceb71afac
SHA512

c743daa93db451b165e2a3aa43ec64f48b9ad1b2dd991f44c26723e987f1e66459731fc239648b54bc767178f6fc592da6e131cad3d1d5aec12e282bdccce352
SSDEEP

1536:u5BDLBCVi9NMIYuQASmS0mJJFL/XlvpjJaHxlmJUl60ReWWKI0pj8YQa2odbdt/e:21qASmSjXy20pjz24T/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd89e31f81399a107855c7973494ec22

Files

bd89e31f81399a107855c7973494ec22
.exe windows:4 windows x86 arch:x86

037d5d295d3e72f43cbd5f9051183adc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ