01d396baf6353c54deb90e3f7602e119551b32d7080e09f4ea9288900db4d498 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01d396baf6353c54deb90e3f7602e119551b32d7080e09f4ea9288900db4d498
Size

352KB
MD5

8aacd982f0c681e9587ac28aadbdcc1f
SHA1

8e2f0c40be1605cdc47ce7e32e6c4120aaef0184
SHA256

01d396baf6353c54deb90e3f7602e119551b32d7080e09f4ea9288900db4d498
SHA512

72623fa5d2fc43382b1cd332236eae5c85bc8887d4b6055d676a5ac04765133948642d15cf76bbe0ab99a5694caea480ee8a6b2969c13c8c45c1da831b2975d4
SSDEEP

1536:PopXMphm4ZSB9ASXq/fiTvlATmeX4Z4R4H4i4/o9FKs0z2xoetEPnyexeyZiVCvW:fGEtucz9/tBH3H3+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01d396baf6353c54deb90e3f7602e119551b32d7080e09f4ea9288900db4d498

Files

01d396baf6353c54deb90e3f7602e119551b32d7080e09f4ea9288900db4d498
.exe windows:4 windows x86 arch:x86

bcc855376254087fd7f51d2c3005fe7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord187
ord696
MethCallEngine
ord516
ord517
ord518
ord593
ord594
ord598
ord520
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord527
ord528
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord573
ord681
ord578
ord685
ord100
ord579
ord616
ord617
ord618
ord619
ord542
ord581

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dkdxbvi
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE