72140f840677ca9b341d7afeefcbbfc360068393161f5248886624de05129c97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72140f840677ca9b341d7afeefcbbfc360068393161f5248886624de05129c97
Size

72KB
MD5

1f7ca11effa3ef357dbc564e9095742a
SHA1

1ba584de1824172f88c64a30a7a9421227767c49
SHA256

72140f840677ca9b341d7afeefcbbfc360068393161f5248886624de05129c97
SHA512

9a4ea7aec2041ad6d20f7697263788e0a1028897ccc178710fbffebe16a1882f3149f99408403dc2bde6954f4c818a2575ff8f48063e255d28bdbe9f16c79b1b
SSDEEP

384:x6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KgxWb/83BXR+oGF:xpQNwC3BESe4Vqth+0V5vKlE3BEJwRrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72140f840677ca9b341d7afeefcbbfc360068393161f5248886624de05129c97

Files

72140f840677ca9b341d7afeefcbbfc360068393161f5248886624de05129c97
.exe windows:4 windows x86 arch:x86

bfbf457d52153d2191e67bb6c9212334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord542
ord545
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ