c3b56cc8a704137b59343b0f7c9fd7da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3b56cc8a704137b59343b0f7c9fd7da
Size

24KB
MD5

c3b56cc8a704137b59343b0f7c9fd7da
SHA1

2309fb187b7d9dbff367409164304fa9bb32f836
SHA256

763f5f66954c8138bbe809bda83b70fdee7c7d070e8ba67a5df4bf2eb825d77b
SHA512

2f78a7a8bd0c44181495be48c007337e279a3f02de5801d1e38195dc69d7fa85ebd8589440c3412eb91f5340009b5eee0b59826790a1dda0a85c188ce77d25d7
SSDEEP

384:q5acLGQb4ZcgNTDfmEL1uW7+b4ZcgNTDc:nRHZcwfmA1u8NZcwc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3b56cc8a704137b59343b0f7c9fd7da

Files

c3b56cc8a704137b59343b0f7c9fd7da
.exe windows:4 windows x86 arch:x86

8eb370b438c878524c81f37bf2283c3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
MethCallEngine
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ