d0d59c992c3323211fbff4662f2de2244d4729f01d0eb8e8d5dd7a07b048eb76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0d59c992c3323211fbff4662f2de2244d4729f01d0eb8e8d5dd7a07b048eb76
Size

420KB
MD5

dd7f2a18a2ca04e84cb3b86bb9bfb9af
SHA1

9cd51a1cf32583106791ea8eebbdc2cedc78ef26
SHA256

d0d59c992c3323211fbff4662f2de2244d4729f01d0eb8e8d5dd7a07b048eb76
SHA512

eea8c2eb487ad86c236f01678fe17b620f777929b70aec93394634b36894115abc0c32cb3831d0548fb39c7476519d228ac2be39c68bbe499069ceaca596ff9b
SSDEEP

12288:ziiYf7pkfQypxvF5Z8zajpHg2A+jpgBNoGvI0:0pi5ZPdg8GBNoGI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0d59c992c3323211fbff4662f2de2244d4729f01d0eb8e8d5dd7a07b048eb76

Files

d0d59c992c3323211fbff4662f2de2244d4729f01d0eb8e8d5dd7a07b048eb76
.exe windows:4 windows x86 arch:x86

ca84389d073d52c0293c00d97044332c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
MethCallEngine
ord516
ord629
ord660
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord608
ord716
ProcCallEngine
ord536
ord685
ord100
ord610
ord613
ord546
ord581

Sections

.text
Size: 412KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ