c139b1c9e80760752f1e4a1595563d1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c139b1c9e80760752f1e4a1595563d1c
Size

1.2MB
MD5

c139b1c9e80760752f1e4a1595563d1c
SHA1

4a34b3091504d477e6e24828cf167296348cc42c
SHA256

9daa6926df9d9fe03a7fa75e921c2d61233673583554348e47b425219e28e91e
SHA512

f1046cb515510ef1e1671cb7293b6287ba5e0518c63adefabac5e898c7d5b9ac8ea18a20b69aceb7b75b58fa7eb8a53571a9f2bf4d3eae815434a307db88d5c8
SSDEEP

12288:YJfzxqkLJ2aKraK0JfzxqkLJ5JfzxqkLJ1spJfzxqkLJ:6bxRNrK+KGbxRNjbxRN1szbxRN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c139b1c9e80760752f1e4a1595563d1c

Files

c139b1c9e80760752f1e4a1595563d1c
.exe windows:4 windows x86 arch:x86

4a2c8431efbbf79fe5ead98898e221bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord594
ord595
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord648
ord571
ord685
ord100
ord617
ord619

Sections

.text
Size: 952KB - Virtual size: 950KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ