b655bba1a6bd06a26ba5ff7dabbaf6177eb06718533e21e3f155d68e4558b24a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b655bba1a6bd06a26ba5ff7dabbaf6177eb06718533e21e3f155d68e4558b24a
Size

20KB
MD5

a91b53282aeecfc1c99483c7598c8747
SHA1

87ad4782128f2828c1a9de581d53bda9bc67a41c
SHA256

b655bba1a6bd06a26ba5ff7dabbaf6177eb06718533e21e3f155d68e4558b24a
SHA512

fb5656cc5889f977a844e3ecd0b1f35fd71adfd55ca47c8568d07277377f3f675dd644277c91f77bf4637af2ad5b9089d75a39abae0747cd063adabc841cabcc
SSDEEP

192:YJFAl6FJVRxRQuOenuEbj3hhiclq4iOUxB40cuaLEf:66l6FJVRYuOenuEbj3DZlPruaLEf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b655bba1a6bd06a26ba5ff7dabbaf6177eb06718533e21e3f155d68e4558b24a

Files

b655bba1a6bd06a26ba5ff7dabbaf6177eb06718533e21e3f155d68e4558b24a
.exe windows:4 windows x86 arch:x86

a834a5157c2bbce8bf7b120af1e52609

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord660
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord609
ord537
ord570
ord100
ord611
ord546

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ