ccf84ba2b400c4e0c4c85433b6ff1a4e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccf84ba2b400c4e0c4c85433b6ff1a4e
Size

24KB
MD5

ccf84ba2b400c4e0c4c85433b6ff1a4e
SHA1

045415eb576a74a71ffa0ceb4c3754b8865d75ff
SHA256

51ac4067d01f5edfc8e3afe8b0bb063d75f968ce6f632a8aaae9697a92a3b5ae
SHA512

45284996a2d287f5265fddcf322d79b5d8988c09151b37478c6a1304ab43abd6479986005fde1f49a7ca9a4c28845b22ed2043dca0c492bdbafc45fe07e9705f
SSDEEP

384:LEc5kif6V3GEL+3BR5BOdHjjjjmwrrH9InNyMK+:4H3kxAwjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccf84ba2b400c4e0c4c85433b6ff1a4e

Files

ccf84ba2b400c4e0c4c85433b6ff1a4e
.exe windows:4 windows x86 arch:x86

28ed259a9968b4d7639f211debde0212

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ