1640d1951c2be7c5e0a3c8280a79daf4c864f3f08e3a76df602ee4b2b4c3ca6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1640d1951c2be7c5e0a3c8280a79daf4c864f3f08e3a76df602ee4b2b4c3ca6e
Size

56KB
MD5

a5fdffbc9836076a21189650f850e186
SHA1

cf1360c82bdb2da50c671233279c17172d852d05
SHA256

1640d1951c2be7c5e0a3c8280a79daf4c864f3f08e3a76df602ee4b2b4c3ca6e
SHA512

e7b2c7888b9462e4dde8b858d9297e91bf8f31719a24224de3e33e86e0abc3fae53e2f33233e25a486c1a09da6b6d48cbc1ac8fcfd3659d228c575275c45f140
SSDEEP

1536:UTzAYXax6Se/oHdrek/NVSUzYbG2qeSu+zdV6:Qo9iUebG2qeSu0V6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1640d1951c2be7c5e0a3c8280a79daf4c864f3f08e3a76df602ee4b2b4c3ca6e

Files

1640d1951c2be7c5e0a3c8280a79daf4c864f3f08e3a76df602ee4b2b4c3ca6e
.exe windows:4 windows x86 arch:x86

5fd4c6f232384dfa7381f1951a7acbe4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord709
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord576
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ