efe4290cdb9893489617ff5d6c2a1a22fc005d822db8f07fb4c35cb569738394 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efe4290cdb9893489617ff5d6c2a1a22fc005d822db8f07fb4c35cb569738394
Size

72KB
MD5

70254ead6342d24d4240fd03d43d7407
SHA1

812e87875d40e840349e1ec137feeec618d60c12
SHA256

efe4290cdb9893489617ff5d6c2a1a22fc005d822db8f07fb4c35cb569738394
SHA512

204072f395e07f8dac41022df747629889a44cd731a755a25677ba71eb18acf483700cddbfaf67a3fba74112f48172359e8679a3185b640e200bb452cd6eb373
SSDEEP

768:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPsT:ieTce/U/hKYuKPS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efe4290cdb9893489617ff5d6c2a1a22fc005d822db8f07fb4c35cb569738394

Files

efe4290cdb9893489617ff5d6c2a1a22fc005d822db8f07fb4c35cb569738394
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ