bf685d80d4afb890a4aa330d0e8c36fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf685d80d4afb890a4aa330d0e8c36fb
Size

370KB
MD5

bf685d80d4afb890a4aa330d0e8c36fb
SHA1

dc7fda24cb94e8231d640f9cfe063a30ef895830
SHA256

bf298d8f9245c6579433fe222d54f36e166cb8d97a8ca901d6b4b2f7f2dc9e37
SHA512

1bc8829d8b22ae2ab30e471fd17141fa4e03c5921745b66da8a68f73c544b96b5c8830f1a75f1babeaa8633cdf42238d34b0b58835cff8b9568a0e2581a7a682
SSDEEP

6144:nNP/2bG/AiQ60NtiE+JRPI1BN9Y1oUAhm2BdAnLIJcte3Dy9TW/Glc0tzYq4HT:NPvS5+JsD9Y17ABgLEctsy9qulhlYq8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf685d80d4afb890a4aa330d0e8c36fb

Files

bf685d80d4afb890a4aa330d0e8c36fb
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ