d77efcdd12893898a2fb5b8855de22ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d77efcdd12893898a2fb5b8855de22ed
Size

64KB
MD5

d77efcdd12893898a2fb5b8855de22ed
SHA1

01a3fa3707cd06912eb8b54a8b0aa9ed2b8b005f
SHA256

f00d649b31d366aea8b23be37eb2b646b96d91b17fd9b3e4d03368328a095c18
SHA512

689b15878c45a446e756119eb892466572fba682acf54b286e363b4a1de68dc4f0b5a2e3e7b1702be2edc97e5f4862f86555ef44bff6025115104fecd20623a6
SSDEEP

768:wTTo7OwQ6K4z/GfF1P5MSKX5ixhzyeOqDlLlFhYsV+TTo:wTToyw/K4KfDM57o7FmsV+TTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d77efcdd12893898a2fb5b8855de22ed

Files

d77efcdd12893898a2fb5b8855de22ed
.exe windows:4 windows x86 arch:x86

3f7ed65ec43d7ec24efcff670f5f205e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord518
ord626
ord593
ord594
ord598
ord520
ord709
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord716
ord717
ProcCallEngine
ord537
ord645
ord573
ord100
ord613
ord616
ord617

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ