ddda95d3205d8a26bad69962d16d18468f0ddd516b1786f39d3704e0c5177d2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddda95d3205d8a26bad69962d16d18468f0ddd516b1786f39d3704e0c5177d2c
Size

64KB
MD5

3a46b453661b8df5d0dd3d8c59cf414e
SHA1

6716fc598e303e81aebb2c1d0afc5f651b2e840b
SHA256

ddda95d3205d8a26bad69962d16d18468f0ddd516b1786f39d3704e0c5177d2c
SHA512

be412fb1f565c2c3f5ad48809ac0d51c35ca6e3656657ba4304a199d79c8137539e9c9e803084a861407eb847a4affcf1dc51cabf45c7c765ee6194e2062799d
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrk:KeTqavEjDWpuhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddda95d3205d8a26bad69962d16d18468f0ddd516b1786f39d3704e0c5177d2c

Files

ddda95d3205d8a26bad69962d16d18468f0ddd516b1786f39d3704e0c5177d2c
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ