c7f32adddc95375a34627feb6df2e573 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7f32adddc95375a34627feb6df2e573
Size

11KB
MD5

c7f32adddc95375a34627feb6df2e573
SHA1

05eae4e98ff0014a93b42b5ef21fe3d10645dde4
SHA256

b00ee9093d2b491e366f7a41f5ac3e300048e43b130a326e1c41754f6790588c
SHA512

320d74e0acf2124fa17893561b77b4bf3c1ca482ed1121f3d2f2211382b8b3af996f8257e1693eaec619da80b7f6c92c1e87040c466a2165b39b7a7396511f5f
SSDEEP

192:QRw7YRCF+94mo07Sklqi1ADNOdrRqcKtvxaVTqpTXdESr4aJKtJ24LmhHyPh:PYRCX07R11aOK/5xakpTXdRotJ24L5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/UDPSPAM.EXE

Files

c7f32adddc95375a34627feb6df2e573
.zip
UDPSPAM.EXE
.exe windows:4 windows x86 arch:x86

1032bfd2d7d7d709ec3c4f8f5c59f582

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

MethCallEngine
ord631
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
ord616

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UHANFO.EXE