ddd9a06f0b1eb6b3bdd89af56c053cc8 | Triage

Sharing

General

Target

ddd9a06f0b1eb6b3bdd89af56c053cc8
Size

496KB
MD5

ddd9a06f0b1eb6b3bdd89af56c053cc8
SHA1

b290ebaafe38687f93a560f0f76121daaa13e324
SHA256

bd51719d8bf0188a2b6db1a4d1f7902f004e34fe3a25ca1ded7da8d1f15cce74
SHA512

367276323830677b9401755d6855e9567ed4cfc0a3ab043e1d77341472587d0167764d8b7303019d0eefe5f327440915c68bdd99b37a12b1dde089ec9f7aad04
SSDEEP

12288:5O68UMA+7TtO4b1vZpPIQ2Laj8uocAPzZoBnWFwe:EnUMACE4NEajtoXepe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddd9a06f0b1eb6b3bdd89af56c053cc8

Files

ddd9a06f0b1eb6b3bdd89af56c053cc8
.exe windows:4 windows x86 arch:x86

403063283543c8b018e0d0067af24e73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
ord581

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 460KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ