c15b3eb72560971dcc5b4bdeef81dc4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c15b3eb72560971dcc5b4bdeef81dc4b
Size

101KB
MD5

c15b3eb72560971dcc5b4bdeef81dc4b
SHA1

bbf73e0aafe4e204eb1a1d06509dfde25564950b
SHA256

47ab8eb7ddd30915b7ab9a9f2ada69912ee87a9fe9a53e8fbadde0ef7f912aeb
SHA512

5a43b4c31277567c2e8da0332ea706e07451b755d56d654bcd04e067938a9099ea735c1efd96e47f4ff3244e92ebabaf4b4b9962b2d2b54eb6021ef3792ea21a
SSDEEP

1536:USLCzuqjqoiHzuiLBP9YF8JxtaRFD8/myYddfoZSM:XLC3zmdLB+F8haTRn8X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c15b3eb72560971dcc5b4bdeef81dc4b

Files

c15b3eb72560971dcc5b4bdeef81dc4b
.exe windows:4 windows x86 arch:x86

3fd76460a50951dc7ab69e826b680818

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord666
ord303
ord304
ord598
ord309
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord713
ord607
ord608
ord716
ProcCallEngine
ord537
ord645
ord570
ord648
ord571
ord681
ord685
ord100
ord616
ord617
ord580
ord581

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE