e09613258c8c6195ab933e5f509e90f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e09613258c8c6195ab933e5f509e90f4
Size

28KB
MD5

e09613258c8c6195ab933e5f509e90f4
SHA1

cf1dd8c8af000d400536a30f0918aa4dfff6a2a2
SHA256

4ef8fe5d9812ab516cae4118a61442335a376c435cee9d135b33ac6a134f1126
SHA512

a5a51eaaf64324a0e1fd6dde650e25742e6727d35aa7687b987a9ce2140ab1ae878ddcc0427d0ceaa1b6bb913867253d5c7595980e9522fee143a792d389e90b
SSDEEP

192:GweJyuoQqUxfyJsO5QUxirzXi3fu3q5SvU7xmjj+S1CulhDYnqtf2S972vZzkAl4:GpJjLO5QRi1SvUQ3+S3hsq/Nz1xt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e09613258c8c6195ab933e5f509e90f4

Files

e09613258c8c6195ab933e5f509e90f4
.exe windows:4 windows x86 arch:x86

b3eb44606ce197290d20adcc513d2cc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord516
ord518
ord519
ord666
ord598
ord631
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord536
ord537
ord648
ord572
ord685
ord578
ord100
ord617
ord581

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ