cf96ac1b0507b5441a56fdffe986e70b576b69bd5b93449da7236ffbe00ddc75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf96ac1b0507b5441a56fdffe986e70b576b69bd5b93449da7236ffbe00ddc75
Size

64KB
MD5

6ade0c8db0cc434aadbac09e8f254a96
SHA1

8aa37224febe0e0833701791ac86d1f7b412c0f9
SHA256

cf96ac1b0507b5441a56fdffe986e70b576b69bd5b93449da7236ffbe00ddc75
SHA512

ca511212be055ac9a6f19c2dc4d5fda28dd5aa3ada4d693bd05fef639b59a6bb807da302f89134023d3653659d19cdfa3c68ac77bf2293bac6e875ab4583598a
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrG:KeTqavEjDWpuhG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf96ac1b0507b5441a56fdffe986e70b576b69bd5b93449da7236ffbe00ddc75

Files

cf96ac1b0507b5441a56fdffe986e70b576b69bd5b93449da7236ffbe00ddc75
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ