df22275f17549c3e0bb5742d06fbcbec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df22275f17549c3e0bb5742d06fbcbec
Size

8KB
MD5

df22275f17549c3e0bb5742d06fbcbec
SHA1

16d21da80f37b6c8543326e857ce4e0dd9b5b961
SHA256

6f695fafe2d878dfe021b4001027a4eeeb7029bb1a4708e0d7091b0e7acfbd08
SHA512

e97f81bca160e70d75f76151286074fe144443d03dba890e2b38a924b780c945f540837d29f0873b5df5d588c223a384e6a1c073fa0eefeb89b6aa3161727e68
SSDEEP

96:rJOmeIOMv7AHSFCKNuB0xHR3gFIZoNUzvlmvHVoNZS4nhOZDn69go:QmeILvHFCzB0xJg+ZHzvsoNfhE69go

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df22275f17549c3e0bb5742d06fbcbec

Files

df22275f17549c3e0bb5742d06fbcbec
.exe windows:4 windows x86 arch:x86

0dbd75aaceff7cc24b7f71635bf12674

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

MethCallEngine
ord593
ord595
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord645
ord100
ord579
ord617
ord619

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ