dd299c680249d96abcc81bfb64bc9d804417a423c825eeaa5770e0236d0e2886 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd299c680249d96abcc81bfb64bc9d804417a423c825eeaa5770e0236d0e2886
Size

64KB
MD5

5d971b680c75b19814a812903377c60f
SHA1

2f11b8bb20dc5b4c4dbecc957c99f3ded98155ed
SHA256

dd299c680249d96abcc81bfb64bc9d804417a423c825eeaa5770e0236d0e2886
SHA512

b4f399d64dea94d3689488b2fe30427205272be93fc6d8a5504fc0b7567eec99194122ff009fe8608f78d3cee0a143e860cadd409c4c7fe2b8d042db9c2d2fd1
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsru:KeTqavEjDWpuhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd299c680249d96abcc81bfb64bc9d804417a423c825eeaa5770e0236d0e2886

Files

dd299c680249d96abcc81bfb64bc9d804417a423c825eeaa5770e0236d0e2886
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ