d7912e676da183cc03b92b32f4407655 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7912e676da183cc03b92b32f4407655
Size

316KB
MD5

d7912e676da183cc03b92b32f4407655
SHA1

a945ccc016a698128c3262f3ee75a07b964491d4
SHA256

75a717feb5fe54cabd14abf748c3edde015a8e49ad7a121ef43d5cca4c0a3ef3
SHA512

76710fd6b4a7c255038242f35b7ebab695574721b13c9e6452c0cf994a477afb2db2f3954d7e22fec16eaf04d98542b984cb48f4f4a2c337627fa70de6b8bfb9
SSDEEP

3072:E4OzN5gnzOdmLGeCfcpwA5f3CEoEtUMbf/e:1Oz0OK7cKiED5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7912e676da183cc03b92b32f4407655

Files

d7912e676da183cc03b92b32f4407655
.exe windows:4 windows x86 arch:x86

88f7f2ad99f6046dad51d292e3ca21d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord517
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord527
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord616
ord618

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE