bf839ad3ea2c2ff760faefd519b34e9f | Triage

Sharing

General

Target

bf839ad3ea2c2ff760faefd519b34e9f
Size

120KB
MD5

bf839ad3ea2c2ff760faefd519b34e9f
SHA1

2f28876e02775a246b133f632a1aa8d0d238bb28
SHA256

5e7924badff6e80d8de2ae47526f7ecad763ea70827df3044e13fb6afc87155f
SHA512

81bee189e17310a4bdf00dd2fcab0633959edef1e96ac7c4969359f2ca3c8842474b693b144eea2749e54254babfebb627aa7a439df33ba395a6f947ac5ff51e
SSDEEP

1536:rqka8wstji9A1g22OHe1Zn+pfp9wbkARrNaaeHVqzuqka8wstji9A1z:fa8P4ad819+pfMjriMzwa8P4aJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf839ad3ea2c2ff760faefd519b34e9f

Files

bf839ad3ea2c2ff760faefd519b34e9f
.exe windows:4 windows x86 arch:x86

143a42ea82eafc806307e6fa75664120

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord593
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ord534
ProcCallEngine
ord648
ord573
ord685
ord100
ord617
ord619

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ