bbf347f217502c807ec0463f91a9063c8ddcf3ee3c22f8ff73a475adc88cbaf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbf347f217502c807ec0463f91a9063c8ddcf3ee3c22f8ff73a475adc88cbaf1
Size

2.0MB
MD5

9c7b846c3becfbdc347b3e7a7ec3ca2b
SHA1

3e6a37a5fc1f7a5414627d5d09d755551e3ab125
SHA256

bbf347f217502c807ec0463f91a9063c8ddcf3ee3c22f8ff73a475adc88cbaf1
SHA512

3aca4cd485460d144905ba053eb15e896ff2642072c1003a5d798ff805173902f85f117a4dfdbfe47593bec1cf98594fe24659e5ac204def6ede41ff87592aa8
SSDEEP

49152:WCFuI1ogb1yfq2ANMye7Y764LkcH9YNImYfseUO/5k8Xs:WCFB1h1dzER4LkcH9BmyvZ/5K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/STCcube-beta3E.exe

Files

bbf347f217502c807ec0463f91a9063c8ddcf3ee3c22f8ff73a475adc88cbaf1
.zip
STCcube-beta3E.exe
.exe windows:4 windows x86 arch:x86

293d70de9a919bdc1b982a9eaca9c398

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord300
ord595
ord303
ord304
ord306
ord520
ord309
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord573
ord100
ord617
ord619
ord581

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ