ddf0eae98a27510ce4060af0d7cfb106 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf0eae98a27510ce4060af0d7cfb106
Size

320KB
MD5

ddf0eae98a27510ce4060af0d7cfb106
SHA1

e6ecf2805413a1a812105603d4991899dad0111b
SHA256

b98f8392e8aff131ce1415483c1e38750dabe7dcb8c0a42dcc66c5ad6b139933
SHA512

6a01576a35ebedfd49fc574369874a4928561f3056b06d05605a1a3819a200b0da80c40b504493d4f544ad02a583a14ae4d950476e1106b74c0185dbea62b32a
SSDEEP

3072:b2HheJxnhlGS2fqba1YncX6JIeZc2tQAp3dC2Zj/AZXk4jX4tFLk86gP9pWeT:ahoeSPMydrZc2yA7ZjwX8tW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf0eae98a27510ce4060af0d7cfb106

Files

ddf0eae98a27510ce4060af0d7cfb106
.exe windows:4 windows x86 arch:x86

0471d9f3d9f142373524705d6a5cb951

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ