bfd865a215eafd96c5c00006e4c4a939 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd865a215eafd96c5c00006e4c4a939
Size

48KB
MD5

bfd865a215eafd96c5c00006e4c4a939
SHA1

04eee50e02da6b632e266b282d8c82cc9825bb5f
SHA256

5d5d55032f2d3fe51288e2a9c584728c236f8560845edb3573bafdb7566145a6
SHA512

72d919cd5f94cd3098425165c01b61bd4e941e4601b5f81316f278db6eab5f33c304196a90d88ceea9972e97eb1bebb7555a4bbf30910263e850c82b230ba9da
SSDEEP

768:ZiNUTYjGbOJNONjCVPCEsokl/9++YjJR9ec:ZtMKb1ucokl/uMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd865a215eafd96c5c00006e4c4a939

Files

bfd865a215eafd96c5c00006e4c4a939
.exe windows:4 windows x86 arch:x86

2b95def43c645bdec2b2bb4bc3b94fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ