d66c234f573e7014e06c6885f79f9a50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d66c234f573e7014e06c6885f79f9a50
Size

308KB
MD5

d66c234f573e7014e06c6885f79f9a50
SHA1

2f7cac4d07b8b04d088db0bfc4751b32b8e285d2
SHA256

08777d80f7e75b9a3d742f4c0f842739b7fe48e64d2048d4f1fd4cdacc8e9660
SHA512

dae1108a15f004d27514360aa49afc228d86664a5af62969d2409d7604180dac4d688482bcf2c3ba2c82ae506acc6b28b2bd927d7de9de2d9352e94445b833c9
SSDEEP

3072:P6Lca+56U04mw49Y3r1suFiEIN1suFiEIAO1m1Tbm9mWFKcG:jzFByzFBK1m1dWFKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d66c234f573e7014e06c6885f79f9a50

Files

d66c234f573e7014e06c6885f79f9a50
.exe windows:4 windows x86 arch:x86

49fc08656f9ffcf7a0fc294258ef56bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord597
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ