c88957ab01819eb4ab335447085626c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c88957ab01819eb4ab335447085626c4
Size

24KB
MD5

c88957ab01819eb4ab335447085626c4
SHA1

969571850818ecc36702844b1962cf21549a9c82
SHA256

0c519ef5b816a2b13cc231dac4ac1338bc3f0252ca4182e2c956872c6d5989f4
SHA512

a244a1a5bf0c930d52fbc4bd15ffd856009f58d13d9bfe94cb8579f844ba0fe63b02ab42bd6b60a4f7fd071d3c0215ff65d90dfde214deabc43651d56be02303
SSDEEP

384:U1JK/lldy6Y41FYsJ84H5y1HDgd5OogHt0F:UnQZY41FY2p5aUuy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c88957ab01819eb4ab335447085626c4

Files

c88957ab01819eb4ab335447085626c4
.exe windows:4 windows x86 arch:x86

4af22468a0726e72a3433e7241c4c3db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord583
MethCallEngine
ord516
ord554
ord664
ord592
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord571
ord100
ord687
ord689
ord610
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ