dfcb74881e104e1e1fd7950e5926632b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfcb74881e104e1e1fd7950e5926632b
Size

36KB
MD5

dfcb74881e104e1e1fd7950e5926632b
SHA1

e7df79a267ef095eef180208ca0f5e9baaa52faa
SHA256

9ba7e4111458178ffc91de69e6eb7c0248ec6a98b585a043255b965172ffbbfc
SHA512

73f576702b6d530252e7a91cbd24095950a12468daf87555b8e590e2cc61fcd44f818d7f21b8feb64104845610368b3bc99d63b64a05a637de0906dd88a73001
SSDEEP

384:YHBgOMyNRh2u2WEu6eDhrNQoiYJQobfmfnL8337CRA:KutGKu232rNQoiXfnqCRA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfcb74881e104e1e1fd7950e5926632b

Files

dfcb74881e104e1e1fd7950e5926632b
.exe windows:4 windows x86 arch:x86

85729e3e4679b91240c6a142f596baad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord532
ProcCallEngine
ord535
ord537
ord645
ord571
ord685
ord100
ord616
ord617
ord652
ord580

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ