f8813d632dfd45f8e903eb6282b732cd[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8813d632dfd45f8e903eb6282b732cd.zip
Size

69KB
MD5

b473fb25caae63d2b096d25826483d89
SHA1

81c3666b32d3ade5c5905f4edb2370b01dccf85d
SHA256

9e509d33d672dea2fe5cb9616963bf87d71f9333030860f74af98aebfedf6432
SHA512

97b738ec9f29e20168b48d2932037c9d0d19ddd6e5f823956b7fc703debcbda1d9e9123930d1a101aaa54bd537b4c4a27707b01ec98fdbf0360e7b5377d575b5
SSDEEP

1536:QHaXgv9+/RDBxazwbUH81kIyS7lGbtAOlEYBZ7SxoWA+64mE:QHv+hHacZyIyS7l8tfz2or+9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7920878337664465adb0254c8135d74c8337cc0a77e6e2aa05c893e76c7f2fb6

Files

f8813d632dfd45f8e903eb6282b732cd.zip
.zip

Password: infected
7920878337664465adb0254c8135d74c8337cc0a77e6e2aa05c893e76c7f2fb6
.exe windows:4 windows x86 arch:x86

Password: infected

890b378ae0c3f2abb9f17ccffc9f080e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord702
EVENT_SINK_AddRef
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord536
ord573
ord100
ord613
ord541
ord580

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ