b988cea5e08848c425b6e81ff3f2ab5cdbbbb9d4660948ec2388b51255c2025d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b988cea5e08848c425b6e81ff3f2ab5cdbbbb9d4660948ec2388b51255c2025d
Size

60KB
MD5

0f88971d31518fd51a31936cd827c49d
SHA1

e224479f2065a7a612db82c597d1b53f436ec213
SHA256

b988cea5e08848c425b6e81ff3f2ab5cdbbbb9d4660948ec2388b51255c2025d
SHA512

992ef0f3956f2a6c52da8fa35be062a2251e4b85c0fa4e4cdab311d0523790d8ee6231ecdb49003c3556e3f46e3390231d2643dbe33dd5003bf6a0c1a99dbb92
SSDEEP

768:1ZZ0DT7s3RHl4mPUML1CfzO3ICFIk2d+JFIkRcrNKe4nqCYn6Qqq7spG6P8Lx4N5:1CkGY3NjdLwOiNMWBWMVP6D5xJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b988cea5e08848c425b6e81ff3f2ab5cdbbbb9d4660948ec2388b51255c2025d

Files

b988cea5e08848c425b6e81ff3f2ab5cdbbbb9d4660948ec2388b51255c2025d
.exe windows:4 windows x86 arch:x86

2a6833f8a67f45a074ae38eed786ca2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord584
ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord714
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ