9c8998d238b4291d1a21e79b71c99200464790cacd7e76df9068a4492feaa466 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c8998d238b4291d1a21e79b71c99200464790cacd7e76df9068a4492feaa466
Size

72KB
MD5

8077706fc6e3c725e0809e877f54b479
SHA1

8c29bef8e3249d2039622fc8fc3ffda0af345a17
SHA256

9c8998d238b4291d1a21e79b71c99200464790cacd7e76df9068a4492feaa466
SHA512

0257c544becc9b48a0b0bba81a1b8efb5a9a6ae6daf12a3612150b15a7fa0b01bc52b062aca1694c049096ca22dc380eef6c3675cb718b705b04d228e071cbcb
SSDEEP

768:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrTd/+I9H:HeT7BVwxfvqguKp+SH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c8998d238b4291d1a21e79b71c99200464790cacd7e76df9068a4492feaa466

Files

9c8998d238b4291d1a21e79b71c99200464790cacd7e76df9068a4492feaa466
.exe windows:4 windows x86 arch:x86

bfbf457d52153d2191e67bb6c9212334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord542
ord545
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ