c380eaa3c3167ac2c30a852fb5ee1a28 | Triage

Sharing

General

Target

c380eaa3c3167ac2c30a852fb5ee1a28
Size

76KB
MD5

c380eaa3c3167ac2c30a852fb5ee1a28
SHA1

a0d679678a63c363aad4e48edb522e6193116cfa
SHA256

3df2ffc18e27fc401048345f703c5116299a46f562343e49cafc0913d82bcc90
SHA512

193779326bed16e83e8e88c115fe77a0876ef4eaaae57ab9c0574f1a7ae8fd04c069869b48e027ad0e6e62e3030a38251db4f5dfd109f050c5d805e00426afd5
SSDEEP

1536:u1jN82YZCvzqpLlYQ/lbHPBMjgCvzqpLlYQ/lbHPBMjMkF:M1vzqpLlBdHK/vzqpLlBdHKFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c380eaa3c3167ac2c30a852fb5ee1a28

Files

c380eaa3c3167ac2c30a852fb5ee1a28
.exe windows:4 windows x86 arch:x86

455e3c87c5118c04ced3f6d538c9c2e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord573
ord578
ord100
ord619
ord581

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ