e8cebc447eb55f8b2f7a6f963a133a6bd3e7c75a5df99068a1f926e3765abb7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8cebc447eb55f8b2f7a6f963a133a6bd3e7c75a5df99068a1f926e3765abb7c
Size

92KB
MD5

ea97a13bfc5542ea2b066b84300befff
SHA1

2b66d3202e1aa6a94fa565b982ac11865026342b
SHA256

e8cebc447eb55f8b2f7a6f963a133a6bd3e7c75a5df99068a1f926e3765abb7c
SHA512

5e9f5630b5fe0a8dbbc89ebeeabeff3cca1cd49db53d4944f754aec6a2b22b6b4f62bc855b189db7f1a55c5cbd3cc6c86d052a404f0d3092363c13b25a95be01
SSDEEP

768:cdvuZtBTSD9mx0CjIGhY4VVN2b1LllfRddcQVEWeSgPl53XXT+AeZO:cd4q9Cr0GhXKdTdTiWeDPv3XAZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8cebc447eb55f8b2f7a6f963a133a6bd3e7c75a5df99068a1f926e3765abb7c

Files

e8cebc447eb55f8b2f7a6f963a133a6bd3e7c75a5df99068a1f926e3765abb7c
.exe windows:4 windows x86 arch:x86

929d78c79c2014e5facf6be937ed95c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetThreadDesktop

kernel32

ResetEvent

gdi32

Chord
CreateCompatibleDC
CreateDiscardableBitmap

winspool.drv

ScheduleJob

winmm

mixerGetNumDevs

msvbvm60

ord187
ord696
ord697
ord698
ord516
ord517
ord518
ord519
ord660
ord557
ord669
ord591
ord598
ord520
ord709
ord631
ord632
ord527
ord528
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord681
ord578
ord100
ord579
ord614
ord616
ord617
ord618
ord619

Sections

.text
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ