8b4fcd24fc5c29cbaf7610fe76742b357721c73d1849d36d1b8253f70da34e1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b4fcd24fc5c29cbaf7610fe76742b357721c73d1849d36d1b8253f70da34e1f
Size

144KB
MD5

90f11d0be2d609e31eda92c8f32a2cc0
SHA1

954ff6e8ea94e05b51d07586a3c44bc78b2144cb
SHA256

8b4fcd24fc5c29cbaf7610fe76742b357721c73d1849d36d1b8253f70da34e1f
SHA512

9b8496a4463edc4c33839f24f8595111fda64adc90bd4d0bcfb15d5fb4639be7c22dc08ac392bdfecffd011e810132e430fc47e88e477ba77dcdcabbee6e4f6e
SSDEEP

3072:ApGPKDc7AnjqSHYJYeGsOaySXucnriL/Wlul/sNeXc0ldUIsJ+dgC:Akwl/sNn0ldUL4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b4fcd24fc5c29cbaf7610fe76742b357721c73d1849d36d1b8253f70da34e1f

Files

8b4fcd24fc5c29cbaf7610fe76742b357721c73d1849d36d1b8253f70da34e1f
.exe windows:4 windows x86 arch:x86

59d5fee66a7c141931f27228f0309898

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord519
ord556
ord557
ord667
ord591
ord669
ord592
ord595
ord597
ord598
ord707
ord523
ord709
ord631
ord525
EVENT_SINK_AddRef
ord527
ord529
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord534
ProcCallEngine
ord537
ord645
ord648
ord681
ord576
ord685
ord100
ord616
ord618
ord543
ord650
ord544
ord546
ord547
ord581

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ