1c339969b7a834390b23d27bbbbf3b62ecf384f2d9324b338c029463a944dff1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c339969b7a834390b23d27bbbbf3b62ecf384f2d9324b338c029463a944dff1
Size

40KB
MD5

07d8acff2df49a2edb8b01641b7f1ff4
SHA1

f366a90a4bd8180b2ff71c0ed234b89a0f471ef2
SHA256

1c339969b7a834390b23d27bbbbf3b62ecf384f2d9324b338c029463a944dff1
SHA512

c9a85d35d89c6f783b6886ef33b727ffb2ac44e39798d9acdf68eee0a19c7f70b931b4db3db745f08fa5d5d97c41bb8f96e70b1f1d8aaff0c4546b0854677bf1
SSDEEP

768:3Gfko/XqHFZkp8F9bdHXtHs7CQpcdHoCCvc:39dFU8F95NWee1vc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c339969b7a834390b23d27bbbbf3b62ecf384f2d9324b338c029463a944dff1

Files

1c339969b7a834390b23d27bbbbf3b62ecf384f2d9324b338c029463a944dff1
.exe windows:4 windows x86 arch:x86

8a0a5343feaaabb3dea2557cc7b45ead

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ