bb99e9c166619c039c5f6d2896a8c075f7b7fdaa606be0d668fb5c88ef40e112 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb99e9c166619c039c5f6d2896a8c075f7b7fdaa606be0d668fb5c88ef40e112
Size

308KB
MD5

1f314cb0acdb0877d7e7031e850a3496
SHA1

092bacd093507af571231dccc58ffe0a74c172a5
SHA256

bb99e9c166619c039c5f6d2896a8c075f7b7fdaa606be0d668fb5c88ef40e112
SHA512

7be04a006811eb2554d4452d9b9923c27e75ce7a6961b7f0b96a4de3f530374a749bcc5e7e82370adb37c3123bcb058ca107c4693e85e2f037c0693c6fc05e09
SSDEEP

3072:P6Lca+56U04mw49Y3r1suFiEIN1suFiEIAO1m1Tbm9mWFKcH:jzFByzFBK1m1dWFKi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb99e9c166619c039c5f6d2896a8c075f7b7fdaa606be0d668fb5c88ef40e112

Files

bb99e9c166619c039c5f6d2896a8c075f7b7fdaa606be0d668fb5c88ef40e112
.exe windows:4 windows x86 arch:x86

49fc08656f9ffcf7a0fc294258ef56bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord597
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ