cdd74b5ee09b4201d25e8f7219425264 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdd74b5ee09b4201d25e8f7219425264
Size

28KB
MD5

cdd74b5ee09b4201d25e8f7219425264
SHA1

278d19914869925ae31cc9d54e3292a626728727
SHA256

774ab8e4d15532cf5302b79b0e7cfa1704c3cbbf262c2131106722183df36bbe
SHA512

a100f0f20a7caba555a8f01f4f3712386e95dbf7ec7d28d2e96eb7906e32e471f972185eebaa2bb8fd7bb3e430a0264dde481b6d3a5148f76e1ada96be100bac
SSDEEP

192:vm36zSwjboJI89TiP8N+X+LNnOvdgaIokbxA69GMG01nIyUEl+ff8/1aiiLUz6Yc:eCSBN9OvdIxX9vnIyR+fE/1NUY7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd74b5ee09b4201d25e8f7219425264

Files

cdd74b5ee09b4201d25e8f7219425264
.exe windows:4 windows x86 arch:x86

b741a08c4c308d4a0f6efd711abee822

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ