676c2368978f086307759ec34880f5c00642a697284c59f8e1db06b0439ac273 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

676c2368978f086307759ec34880f5c00642a697284c59f8e1db06b0439ac273
Size

570KB
MD5

9b8e2cacaedeb6153c8d5e53df1ad494
SHA1

40c740fdcd5c31d7f77a0fc02a402bfe18cd5934
SHA256

676c2368978f086307759ec34880f5c00642a697284c59f8e1db06b0439ac273
SHA512

61a355532596357935c2984030de5a4fbd3298e007f8a99463b669579b8a46be8ea5836141b755d577bb352e5cdfa4d3a55fc34d321a723e89f509eaf807df26
SSDEEP

12288:aXvVJ5rCZkcAH1u9e9H1u9HwawatTZ61kVTZ61pmiIg+bNwY7ubNwYyUzdflywF9:afbH1u9e9H1u9HwawatTZ61kVTZ61pm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
676c2368978f086307759ec34880f5c00642a697284c59f8e1db06b0439ac273

Files

676c2368978f086307759ec34880f5c00642a697284c59f8e1db06b0439ac273
.exe windows:4 windows x86 arch:x86

3cf0812b425054a01a588036e79d4306

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

ord582
ord583
ord585
ord586
ord587
ord588
MethCallEngine
ord620
ord519
ord595
ord598
EVENT_SINK_AddRef
ord527
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord530
ProcCallEngine
ord537
ord646
ord571
ord685
ord100
ord614
ord650
ord651
ord581

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ