ca35dacca1b78dd0fc4c749469ccc3ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca35dacca1b78dd0fc4c749469ccc3ec
Size

24KB
MD5

ca35dacca1b78dd0fc4c749469ccc3ec
SHA1

8c6842df92356c357129a7df0bdeae5a19326bfa
SHA256

e1ccb4ddc338243f95137b9ff63c595175e33e1795179fd07ab95247994e1256
SHA512

42a73af68dd7e7c70ee578fe190a526c39f34441bff1eb83ff815a7a891315fe446499142c796f2f952c8a6483f6c2ecc43e41cd60d1cce426db50f79d72aae4
SSDEEP

384:2465Lq06n8cru02Fj91p911mY8hBeZ74:246520wru02ZSzveZ74

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca35dacca1b78dd0fc4c749469ccc3ec

Files

ca35dacca1b78dd0fc4c749469ccc3ec
.exe windows:4 windows x86 arch:x86

c45e91bf24c3456ba7433ee2e64b90e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord520
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ