19a75c7c514d96002de1b7909601837c806ddb13a83cfaa9c0e78530ba5ca443 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19a75c7c514d96002de1b7909601837c806ddb13a83cfaa9c0e78530ba5ca443
Size

64KB
MD5

c19449e11e1cb559503a17d633d35a5e
SHA1

913864b82dedec2d43e6edad5e809ee3d914c546
SHA256

19a75c7c514d96002de1b7909601837c806ddb13a83cfaa9c0e78530ba5ca443
SHA512

30ed08c0902accfa51a17fc177fbe3ff3b68603b1e66f477d18b917df0e21850627d4dbe04b4c92956a602043747f1b1c37edbd4bf8fe4ab621504960aa76dfd
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrG:KeTqavEjDWpuhG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19a75c7c514d96002de1b7909601837c806ddb13a83cfaa9c0e78530ba5ca443

Files

19a75c7c514d96002de1b7909601837c806ddb13a83cfaa9c0e78530ba5ca443
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ