be402f50cdffc42f81e2dd7f8f191370 | Triage

Sharing

General

Target

be402f50cdffc42f81e2dd7f8f191370
Size

24KB
MD5

be402f50cdffc42f81e2dd7f8f191370
SHA1

cd3c0d4c4bbb6316bcd19893ceea304b0d24a031
SHA256

91b50fde5786ae5db55faf09adc4954f55fe0aa9e9743e0f830e6acbd9708881
SHA512

d14d72a7ccb3f7e7a8647b5b85c32c15bbcd0a11447b17f833552e83323e1372ba2373ea84824327ad34dc24639655fd74666d261aabf19bcca46908cf2409c9
SSDEEP

384:LcMDbrfAwzoQIkeASBkq0iCDZ79A2BIkeAS:vPkwjIkjRvDZpA2BIkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be402f50cdffc42f81e2dd7f8f191370

Files

be402f50cdffc42f81e2dd7f8f191370
.exe windows:4 windows x86 arch:x86

f12bb04da37b4420f53f2cb739eeb997

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord518
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord647
ord570
ord576
ord685
ord100
ord689
ord612

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ