f34e08c1727d99e220821798cb0f16fe9ae389d860d1f55239bf6af20a19755a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f34e08c1727d99e220821798cb0f16fe9ae389d860d1f55239bf6af20a19755a
Size

72KB
MD5

0a6786127b9527d58c4771ff5b778eca
SHA1

c8b09395e52e12f6e8bf13c107a361e37e94a411
SHA256

f34e08c1727d99e220821798cb0f16fe9ae389d860d1f55239bf6af20a19755a
SHA512

62e968fc6a64d0b2182a6585e1f4a522d9300908cc27ecde6fd9ccf543be8aaee53884c47265746f409419d1df231ba02d4501f5f23944ab2a9896fce63e404b
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2x:ipQNwC3BEddsEqOt/hyJF+x3BEJwRr9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f34e08c1727d99e220821798cb0f16fe9ae389d860d1f55239bf6af20a19755a

Files

f34e08c1727d99e220821798cb0f16fe9ae389d860d1f55239bf6af20a19755a
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ