c99e9f4b0e0741e5ee4d90c4803898b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c99e9f4b0e0741e5ee4d90c4803898b6
Size

36KB
MD5

c99e9f4b0e0741e5ee4d90c4803898b6
SHA1

e5be6688660c61e887b40993bcb4342b962cd432
SHA256

9d540e1be880c210245655b201edab8d8ff5dcddeaa727d383d11116571aa8a6
SHA512

7466a7e01f09e763e3aa15de05e4c354a95f416031089d49913a1345920c7efecbb4a535e2c8e1a49c07119b18d0f698a29856e634fff01c5e36163c3bc62ac4
SSDEEP

384:9F7tuoxXKD2hX/GqbO+y3GdOrwHScJ1LYWWsJvWSmKD2:77t7XXOqbjOOycTLYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c99e9f4b0e0741e5ee4d90c4803898b6

Files

c99e9f4b0e0741e5ee4d90c4803898b6
.exe windows:4 windows x86 arch:x86

7ca5302afc2bba53ac26c4bd568d8e25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord661
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord645
ord576
ord100
ord616
ord617
ord618
ord546

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE