d48bba8abc8c9b500833721821ad8cf0 | Triage

Sharing

General

Target

d48bba8abc8c9b500833721821ad8cf0
Size

272KB
MD5

d48bba8abc8c9b500833721821ad8cf0
SHA1

6c337fdb905c2d3d69584d0330dc78a1153f4c9b
SHA256

f01b29d1444ca0b8056959deab9c46cd4c306b173742a8fdb62d3c41a3e8648d
SHA512

e231f9ef4981f7aa8d637eec388fb48e3c31dd93ba6034a6c1a6a7921ffc122d65c4fdf78b93352b39e00125ac2019f34b7752a51301f57c5edbadd19d85abc8
SSDEEP

6144:kSkPxDtbmWy6yhZsLw7BgnG7HxIlbkjx+xXuz98I+mVcvD:kSkZFksAd7RIl439DF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d48bba8abc8c9b500833721821ad8cf0

Files

d48bba8abc8c9b500833721821ad8cf0
.exe windows:4 windows x86 arch:x86

0e9e2d22c63507932487317776285c92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord631
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord681
ord685
ord100
ord616
ord581

Sections

.
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ