cb137701d51e7dec824ed28a2ee1a631 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb137701d51e7dec824ed28a2ee1a631
Size

72KB
MD5

cb137701d51e7dec824ed28a2ee1a631
SHA1

8111b3880c2bd3da28b2113341563d631fa373d8
SHA256

a9721f0dea2335428200cfa2914614e2c5391375387320c20b41fd3ac563bc7b
SHA512

045a48d0508c7392f90e017e07ac46c588dda7e2903630fa8dee393541a27cfa4eab0ee733c923264d6a5a162775ec940fbe655bbcfd18cc30476190da9354cb
SSDEEP

768:HgA91ZNMy7AV0armaaaaayNWD1cNtSHJgHI+92zPNiKmlvdj0armaaaaa2My7A:AA9Qiobxcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb137701d51e7dec824ed28a2ee1a631

Files

cb137701d51e7dec824ed28a2ee1a631
.exe windows:4 windows x86 arch:x86

d659c5f5b7b1fb7ecafd29ce281800b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord572
ord100
ord618

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ