e0fbca755649a7bce688b1717d3fa0cb09d385b6538280fd84732f1d4f549284 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0fbca755649a7bce688b1717d3fa0cb09d385b6538280fd84732f1d4f549284
Size

72KB
MD5

610641f0b7f1c0ef3e6dd6fa407b7387
SHA1

f72fe3f6d71fbfa3ca14400bbeee8e8f90fd9798
SHA256

e0fbca755649a7bce688b1717d3fa0cb09d385b6538280fd84732f1d4f549284
SHA512

2cefdf969d660aef106efd1f84386087d6644334e0e638383c97534b0fba46fc069b53d388dc6e3914a9be9805d6ab6189e2de173ea56b055d1d31cd134fcf85
SSDEEP

384:y6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2F:ypQNwC3BEddsEqOt/hyJF+x3BEJwRrG+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0fbca755649a7bce688b1717d3fa0cb09d385b6538280fd84732f1d4f549284

Files

e0fbca755649a7bce688b1717d3fa0cb09d385b6538280fd84732f1d4f549284
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ