e17c1adb2c8927dbf20b40f8c0f91006 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e17c1adb2c8927dbf20b40f8c0f91006
Size

104KB
MD5

e17c1adb2c8927dbf20b40f8c0f91006
SHA1

c0dcfa1f419742bb4cd28b836b8de8d44539651b
SHA256

9d1632a8006761a4cdbfd7b03e90346fa60532c9842415257d2e1c0ded13647b
SHA512

7c3b1304c923789157648b642ce980513d33095d3d19a4fbc7ce2654c4fcb95441954fc140ca78b4d6b76d4767c1cb4686dd646ff5ec39d530a43b33d083a35f
SSDEEP

1536:/Uucm86+35aBaIEpmYpYZCp5ICt1ti5GdjO9D3:cucm8eBPErYZCoC0Oq9L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e17c1adb2c8927dbf20b40f8c0f91006

Files

e17c1adb2c8927dbf20b40f8c0f91006
.exe windows:4 windows x86 arch:x86

c3787aec3a6cf97d3f0da30ff071277f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord552
ord595
ord598
ord704
ord706
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord536
ord648
ord100
ord610
ord613
ord546

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ