0ed21dda71180cea41fc3b4e8f376240N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ed21dda71180cea41fc3b4e8f376240N.exe
Size

1.6MB
MD5

0ed21dda71180cea41fc3b4e8f376240
SHA1

8a49fc3bc80ed23cefef7cd1e73aa76e470e700d
SHA256

17677f8126b53f96567a9cac554baa8fe8d722a650a7f305776e7dc6770135c4
SHA512

aaf5ae5ef9c103d9ac4201904beab94f1b4115003fccd85fdc143241a7eec71d78d991539566ea25a4c2c20bbd06508d2b441d76f708eda273a7fe01d06f7db5
SSDEEP

12288:kqpZcXJA4LJrwGRHP56E2If9pEPiJy0PGodYeafYCRp4v:kqkXJA4LJrwG1P56EP/FJXLdfa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ed21dda71180cea41fc3b4e8f376240N.exe

Files

0ed21dda71180cea41fc3b4e8f376240N.exe
.exe windows:4 windows x86 arch:x86

a23564d3bdde5931b0e999d4d1fdccf9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord621
ord516
ord518
ord552
ord660
ord553
ord666
ord595
ord597
ord598
ord599
ord520
ord522
ord524
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord670
ord567
ord569
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord530
ord608
ord531
ord716
ord717
ord534
ord535
ord645
ord647
ord570
ord648
ord571
ord576
ord577
ord685
ord100
ord610
ord612
ord613
ord617
ord619
ord542
ord652
ord545
ord546
ord581

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ