cd2640c97a4fdf60af3313ad490f5c24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd2640c97a4fdf60af3313ad490f5c24
Size

40KB
MD5

cd2640c97a4fdf60af3313ad490f5c24
SHA1

6b31cab4566f38d040db8df3be79d3329cdba8d2
SHA256

4e7b54dfc4707e6158a6739faac0fd020dade195e84774495df68e3e41bd7a91
SHA512

3b6f238cfcb0a28ac34037170539a77c485a5afb6084be626884f74556ad46a43d67b06e881f42ce66ab98c69b3e58f1c51939aeb756492080202b66ce7da12f
SSDEEP

384:c52pceFFmXUE88OgneBxnF957ytCVXv5Yde+arJIcs1ph1v6Of1YNVEJq:7vqiF9bDYdeVJ81vnaNKJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd2640c97a4fdf60af3313ad490f5c24

Files

cd2640c97a4fdf60af3313ad490f5c24
.exe windows:4 windows x86 arch:x86

697639a9b24cdce2f5a16991071b9651

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord681
ord685
ord100
ord618
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ