d727c10d922e0e11e006cc30453edf83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d727c10d922e0e11e006cc30453edf83
Size

28KB
MD5

d727c10d922e0e11e006cc30453edf83
SHA1

2112e23858600ee4a095f13ed44d34d5196d1e21
SHA256

e16317a2407235acf50c030d4bd2655de185eac2274f52f472e2a874ce6d56ef
SHA512

28e540b722661439796403ef8ff4a6f05c7c869caacdb987babf2b59a9f894248cfb479b45eff6cd9665d4468540103f2e4b5556c9948f8340aa0c854e5d9ab1
SSDEEP

384:OwWWx9o/hdYPyRcCdV4jyFNlv7TDR7MCheFNSOUl7IC57IRqiQ:OY9o/h0yc22yFNlv7TFeru8a8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d727c10d922e0e11e006cc30453edf83

Files

d727c10d922e0e11e006cc30453edf83
.exe windows:4 windows x86 arch:x86

227355e08d9eaa8e2f071033223657ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ