dfa012271bc8de9bd25b7f8d272f6e3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfa012271bc8de9bd25b7f8d272f6e3b
Size

249KB
MD5

dfa012271bc8de9bd25b7f8d272f6e3b
SHA1

afb9954a21cc082664e0838d4988f2ac09b69e1a
SHA256

e181a14fc427290d777bfc3dd582d7a636f56bafae163730d2affeb4c38c3f1f
SHA512

5f6cb8775cbf5ca44a327ca71bb62c7cd5b2277a3ddefdfa553b2c54637d585b7299573321e2079009ff4c0f4b8441a541cc1337f5958725eb8095bb172cc6a5
SSDEEP

3072:MAuPoWDXGHVu4RBObQ84oDKTcD2F3ZsBrHZTDG3IZbVGqz3pTOK:DyCQKPEDxY+vLZbgm3pTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa012271bc8de9bd25b7f8d272f6e3b

Files

dfa012271bc8de9bd25b7f8d272f6e3b
.exe windows:4 windows x86 arch:x86

997e7d352895027ce7a3278c095d4947

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord596
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord534
ProcCallEngine
ord644
ord100

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ