b74d7aa7ab47680c39e5a84b7a74c9ef094c5e4d3778b364d5b2ed8195cd9e33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b74d7aa7ab47680c39e5a84b7a74c9ef094c5e4d3778b364d5b2ed8195cd9e33
Size

54KB
MD5

5aee6f3b5e74e7616082acc826d29522
SHA1

0e98268368a499eee2f1015a28a816a00a32eb06
SHA256

b74d7aa7ab47680c39e5a84b7a74c9ef094c5e4d3778b364d5b2ed8195cd9e33
SHA512

e558445d8052a9bc2e382e0e421b244e02961ab4fd0877604586ef779d35f76564c99f9da5aee580c3b68628121cd06e1908fb2e24c645a973417a55a4ff2f48
SSDEEP

1536:WBzec5QdcFjfUXhXAXzXkkcUcks98kMEi7l:OzeWO0ykcUcks98kMEc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b74d7aa7ab47680c39e5a84b7a74c9ef094c5e4d3778b364d5b2ed8195cd9e33

Files

b74d7aa7ab47680c39e5a84b7a74c9ef094c5e4d3778b364d5b2ed8195cd9e33
.exe windows:4 windows x86 arch:x86

4d98a419170287d73c49700d461f5473

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord187
MethCallEngine
ord516
ord517
ord518
ord593
ord594
ord598
ord520
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord579
ord616
ord618
ord619

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE