cd97a43adc0c21c5e592c47198cbf5db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd97a43adc0c21c5e592c47198cbf5db
Size

544KB
MD5

cd97a43adc0c21c5e592c47198cbf5db
SHA1

317e44be2978874f1f82dd0fded9c7061b0aa7cf
SHA256

4ee1f8db1f60a176c94bba4f0ee7cb16a5de56f7cca9ace0ae38e5c49457b09b
SHA512

b9a2dc97e6c910eb8e0a91ec0a45559ac748999b60f37e31699fc4da890b2d7b0f8f7b5a3f0c863fe14d8aa4f1c25c9b429da38b51d5e1da366d659a733733bf
SSDEEP

12288:NYx3LvzB5ovIiDr+NYoBVVQEwDWqPzxMlT51v:evztSr+NYoBVyFTxMd51v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd97a43adc0c21c5e592c47198cbf5db

Files

cd97a43adc0c21c5e592c47198cbf5db
.exe windows:4 windows x86 arch:x86

9bf19ea6787a25c07dae467b0070e280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord619

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 508KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ