ef9c194008796a9f90881aba2421b7463fb254f33b274600585d7c76e56db4c5 | Triage

Sharing

General

Target

ef9c194008796a9f90881aba2421b7463fb254f33b274600585d7c76e56db4c5
Size

316KB
MD5

5fe3270718f9a23668a98b3633f01228
SHA1

4f85568edab5745a90fc28724eebf2336fd4c930
SHA256

ef9c194008796a9f90881aba2421b7463fb254f33b274600585d7c76e56db4c5
SHA512

0ce53ac6ef765de266da746bc3db32916e4b5c7dc954a267bb3ef31d732c9e516a0ef57f303c9aadc5ac9bc9cdd0eb26e4800a06be357761b2b949827df95af6
SSDEEP

3072:49b0vHLfxRoBIeuyM+P6wM4DWMWk3w1WO+BjUbGs3Rv5w9HogPxXrMm95Nu974h6:40Lfx6BoaNR3scoAWcO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef9c194008796a9f90881aba2421b7463fb254f33b274600585d7c76e56db4c5

Files

ef9c194008796a9f90881aba2421b7463fb254f33b274600585d7c76e56db4c5
.exe windows:4 windows x86 arch:x86

e33d39d5f48f46bf9ffe67f9f77c75d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord517
ord519
ord669
ord592
ord300
ord301
ord595
ord302
ord303
ord598
ord305
ord306
ord307
ord521
ord308
ord309
ord631
ord632
ord525
EVENT_SINK_AddRef
ord527
ord528
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord606
ord716
ord717
ProcCallEngine
ord537
ord645
ord570
ord648
ord681
ord578
ord685
ord100
ord689
ord616
ord617
ord618
ord650
ord546

Sections

.text
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ