622335163fbded0c7f4eaf3aae2bab54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622335163fbded0c7f4eaf3aae2bab54
Size

204KB
MD5

622335163fbded0c7f4eaf3aae2bab54
SHA1

68dc896603da31d126c4dd3d7bd18105eab68626
SHA256

8bade711eedd4f6619eaf552ce708c79bb783bb2157aecd8deb285701bed6e7d
SHA512

efffbd76eb2213c7aa78eb90206b9cf408d6a0747e2ad0fcc9f2f0bdcebb65c77a3b6de834213d64d0613ce15d61fa9974f39a23b332ff720f81fb96dbd2c5a5
SSDEEP

3072:qmzW810tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWVg:lim4QxL7B9W0c1RCzR/fSml3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622335163fbded0c7f4eaf3aae2bab54

Files

622335163fbded0c7f4eaf3aae2bab54
.exe windows:4 windows x86 arch:x86

abe8603b44f3b25eb24729987e33578b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord593
ord300
ord594
ord598
ord306
ord520
ord709
ord631
ord525
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord647
ord573
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ