c9a9ed06148f24ccd149fcba3c875ad5 | Triage

Sharing

General

Target

c9a9ed06148f24ccd149fcba3c875ad5
Size

208KB
MD5

c9a9ed06148f24ccd149fcba3c875ad5
SHA1

eb0a73a1b4c7e58a041da7cd802b134027848dfe
SHA256

5c3e8f46c3f64bac3da015dbc741cdd9a52ee059e453ba26ed980add32a21137
SHA512

4ca13741e7a913dadcc0c363334c8d6525c98990000478bd390c674efbeda05c349d09150dd37e85ce1e0692fa217df4c487919012aeef5c35d76c242cb0c434
SSDEEP

1536:nseW5VrWQuZNWAKxFN1GY5ec016z0yl9CHIhpWcbF7ty1EJGIUFljWH9AECXK:1uQN16z50o75Z701EktYSo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9a9ed06148f24ccd149fcba3c875ad5

Files

c9a9ed06148f24ccd149fcba3c875ad5
.exe windows:4 windows x86 arch:x86

31897bf541404023c0a283f9ac6241ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100
ord581

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ