1ffff5925e65a91f9a23e8b1cda7ae76c163455a5b8c4aec7d1d09e8b7937281 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ffff5925e65a91f9a23e8b1cda7ae76c163455a5b8c4aec7d1d09e8b7937281
Size

68KB
MD5

72091c05de4464e5eddd6985f78b6685
SHA1

7032a22904fcf56656e51b4960aec316e3bee04a
SHA256

1ffff5925e65a91f9a23e8b1cda7ae76c163455a5b8c4aec7d1d09e8b7937281
SHA512

7d757f9e7162ef76c69a52cb5d7ace879a8db6df481e03ab2d4ef6076770ac6016c3ad5fbe3379870b93c1ed504b4b9aab66588a77ee884df9a24ebfeb07299c
SSDEEP

768:Cqgpy3TI9R++9Z+5fFJ7pxUYb4r4p82lsHhrinIvGR+JFvr9EpPX2m4Ykn3TZ6ep:CBE3TI9R/CfFJVAz2qSvG+xX63NC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ffff5925e65a91f9a23e8b1cda7ae76c163455a5b8c4aec7d1d09e8b7937281

Files

1ffff5925e65a91f9a23e8b1cda7ae76c163455a5b8c4aec7d1d09e8b7937281
.exe windows:4 windows x86 arch:x86

8d41b10c1aecb6e57a38b9a057cdcae7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord593
ord300
ord594
ord595
ord596
ord304
ord306
EVENT_SINK_AddRef
EVENT_SINK_Release
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord100

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE