c1f86ee3f29c5c7eaed0f2be5968b681 | Triage

Sharing

General

Target

c1f86ee3f29c5c7eaed0f2be5968b681
Size

48KB
MD5

c1f86ee3f29c5c7eaed0f2be5968b681
SHA1

6ea96c15a237f92c6b22af24a3d03ea1888d86a8
SHA256

58c047ff1f9bcd63dc151fb84b1c74659e1bbdad9cd0f5084dfbe50b0ccce47e
SHA512

3c2ae4e20c90cf22ac699e3977fcab50bec7302489668fb0ad103d9148adf2e3d0ce28af97a4463ff451826152ce7641da4d755c12b8c7c6e80efd9ad4047b5a
SSDEEP

768:sCiNUTYjGbOJNONjCVPCEsokl/9++yCjJR9ec:3tMKb1ucokl/tMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1f86ee3f29c5c7eaed0f2be5968b681

Files

c1f86ee3f29c5c7eaed0f2be5968b681
.exe windows:4 windows x86 arch:x86

2b95def43c645bdec2b2bb4bc3b94fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ