dff7b867bc35dbc81b35ee638853fd60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dff7b867bc35dbc81b35ee638853fd60
Size

156KB
MD5

dff7b867bc35dbc81b35ee638853fd60
SHA1

cb023629e3467adf25c86016e9a64a951da3ecbb
SHA256

6c726b63a3703f918698fb609fd7c0c1e0d9cab8026255313bb10601a10d0cb2
SHA512

35b8d53083c9c648fdd5174ecdea9405e196e9b54c1424e7c274b7b9b55b17ff15a566b18f90a52d3c93d04da467eeeea6e24a673696ae356afdc96b3e7d6f77
SSDEEP

3072:WQGpgh863FbKDCy01ixk5INTWu16y06TtdlEV:WQS+7y01iN46JEV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dff7b867bc35dbc81b35ee638853fd60

Files

dff7b867bc35dbc81b35ee638853fd60
.exe windows:4 windows x86 arch:x86

201b8019b33d99c0d16406a463f53123

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord519
ord558
ord666
ord595
ord598
ord599
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord716
ord717
ProcCallEngine
ord536
ord644
ord537
ord648
ord572
ord681
ord576
ord100
ord616
ord617
ord581

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ