e036ac232aa5fe32c26f6b0b74a476ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e036ac232aa5fe32c26f6b0b74a476ae
Size

604KB
MD5

e036ac232aa5fe32c26f6b0b74a476ae
SHA1

ac022d10e7f48a388f83b0525bfd64c511df9eea
SHA256

bb0f8c588477dc0c1f2526ccb569140c9cd725ca0fcb32341f0b8e6d09dd3939
SHA512

194a9272929e3a64772a7629f3e2aa518582b89a634d90b4fd52ce3030eba06d33b9988aa7b63720d5f02c31c3f61232861242951f57fee118e90948269512f2
SSDEEP

3072:Tv8xkbCRFzC+Er37upE3kXlilcJQXUDsUHle98Wna8TAT1dfwv6n:6131xrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e036ac232aa5fe32c26f6b0b74a476ae

Files

e036ac232aa5fe32c26f6b0b74a476ae
.exe windows:4 windows x86 arch:x86

e61516be1ab5ceb051a5d49c89c4856f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 592KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ