cd8525f06c2a831661bcd5b9829004a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd8525f06c2a831661bcd5b9829004a8
Size

289KB
MD5

cd8525f06c2a831661bcd5b9829004a8
SHA1

a46eabada91ea6a01926257a185f808b3b8a35cc
SHA256

8518cc1c5837d9708979070d93e1c08869efb1e2cd0856a6af27c0b0727ede40
SHA512

3f97a778920f9086984a7981589f85bf0aa8a66006ae524a02f45ff1be64957ea3f2b66abc870bcd9fba618a2bd3bf1f20a245acf6e127287c95eb091faa5321
SSDEEP

1536:hsJlOGa8LMKJJlgENcWV7E4syJpLdJE/vv6g3Sv4VxI+60xG36NgIBtf:hsJlOGa8bJl3VsyJynjivWID3xIBp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd8525f06c2a831661bcd5b9829004a8

Files

cd8525f06c2a831661bcd5b9829004a8
.exe windows:4 windows x86 arch:x86

dc5ed6518320616a5bda1f08462ba9b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord537
ord645
ord570
ord571
ord576
ord100
ord617
ord619

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE