d3f5863bf7e890903af95e1cc71435a8 | Triage

Sharing

General

Target

d3f5863bf7e890903af95e1cc71435a8
Size

48KB
MD5

d3f5863bf7e890903af95e1cc71435a8
SHA1

6012986f10130e363bcd167c3f4a3a196e9da4e0
SHA256

e50d735cce5de5239defb2efafc33c0ab9a7ca1f5e6556f3efff74278a0bbc59
SHA512

11b7cac9b001550684e9b2be346a36a58d5d1b7e64b05c2234e2f3ae85162c960212a1203682f421a999a2e68e62ab083852e9939e962ca572c21462798f40c6
SSDEEP

768:7XCXyMMZShA4AvN3vILkaeh73MTWqyz+vFvW2Nr9wgjc:yyMMbNfILk5+vbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3f5863bf7e890903af95e1cc71435a8

Files

d3f5863bf7e890903af95e1cc71435a8
.exe windows:4 windows x86 arch:x86

d9e727e04741020408958c0aa347f2bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord667
ord300
ord595
ord303
ord306
ord520
ord309
ord631
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord645
ord648
ord681
ord576
ord685
ord578
ord100
ord612
ord617
ord650
ord546
ord581

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ