c0e30d18c7e1208783561fd7eff20838235d05d87979e43b4ad7b28fc047e214 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0e30d18c7e1208783561fd7eff20838235d05d87979e43b4ad7b28fc047e214
Size

64KB
MD5

486fa4414a162ce208cd3110d8342acf
SHA1

c53c6774557887cd3cc711853e8918ac52058f16
SHA256

c0e30d18c7e1208783561fd7eff20838235d05d87979e43b4ad7b28fc047e214
SHA512

162e3251216c4349efecce48ac6aba78b68804c80562aef90df160a5639c4a68c6a39768643fec3f81c9adf6a35d670a94b03fc4088a81ddd14926f7a7b6f836
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsru:KeTqavEjDWpuhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e30d18c7e1208783561fd7eff20838235d05d87979e43b4ad7b28fc047e214

Files

c0e30d18c7e1208783561fd7eff20838235d05d87979e43b4ad7b28fc047e214
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ