d3c96b2b7beafaa5c2fc4063ddb603c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3c96b2b7beafaa5c2fc4063ddb603c5
Size

68KB
MD5

d3c96b2b7beafaa5c2fc4063ddb603c5
SHA1

bc35e42188c3348d60ead1f082b4048b38c8ff76
SHA256

5c492d049e909c219cc3172518a55c7a4f0606d9f47541ae9cf70ef5e253209f
SHA512

f3eaa311f11e5380d0020cc9cbf295be687621bcf38301965ea007d448a6a304954bb36ad58471e7d00c3b145548ac050340f8af8f06ed3752ad1af38178ed9f
SSDEEP

768:vKdpgmBCHgJ1sqJBqM91D1P4Uv1jULdPHSeJNEWcy/tCgev1Vm:vM+HgJHJQsr4IUjV/gv1Vm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3c96b2b7beafaa5c2fc4063ddb603c5

Files

d3c96b2b7beafaa5c2fc4063ddb603c5
.exe windows:4 windows x86 arch:x86

355b5fb662e990da08cb8cbf1815a0c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord187
ord588
MethCallEngine
ord516
ord662
ord595
ord598
ord306
ord520
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord318
ord717
ProcCallEngine
ord537
ord644
ord645
ord647
ord570
ord648
ord577
ord685
ord100
ord613
ord617

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ