ef9088a83c6299ba142ac158ede67caf6ae77e07e1168f0f645e1a3926ebb600 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef9088a83c6299ba142ac158ede67caf6ae77e07e1168f0f645e1a3926ebb600
Size

1.6MB
MD5

cd9bcb06e3f5739250091d317c91a753
SHA1

5e1e082e58c806a17abb718318b7cc10a87e5a74
SHA256

ef9088a83c6299ba142ac158ede67caf6ae77e07e1168f0f645e1a3926ebb600
SHA512

3db8e78b1a1049308762067741c810397d2c3da6fd441a5cda7d304ca0a4b1eaeab977fece21e70a9cb7126f1986e03e824838a9cf49f955a643275fa19def20
SSDEEP

12288:gHKofGJclgVlXGlPWmbdPn2BLg5B75xdp4ltgYTRpMv:QKofGJclgVlXGlPWmbV0GBZpwp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef9088a83c6299ba142ac158ede67caf6ae77e07e1168f0f645e1a3926ebb600

Files

ef9088a83c6299ba142ac158ede67caf6ae77e07e1168f0f645e1a3926ebb600
.exe windows:4 windows x86 arch:x86

a23564d3bdde5931b0e999d4d1fdccf9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord621
ord516
ord518
ord552
ord660
ord553
ord666
ord595
ord597
ord598
ord599
ord520
ord522
ord524
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord670
ord567
ord569
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord530
ord608
ord531
ord716
ord717
ord534
ord535
ord645
ord647
ord570
ord648
ord571
ord576
ord577
ord685
ord100
ord610
ord612
ord613
ord617
ord619
ord542
ord652
ord545
ord546
ord581

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ