681132f28e02a7e7011af471e4b0580d5032ab43c20e13f70cdf937db30e9785[.]7z

General

Target

681132f28e02a7e7011af471e4b0580d5032ab43c20e13f70cdf937db30e9785.7z
Size

18KB
MD5

afdf6032ec471163f6fe56d10643ce44
SHA1

ba29aa7352afe930b811fdd56c3316484665780c
SHA256

f8e5511c73d008ab8bb1ea7f563975e0477d072565206693b9c4447395ab0865
SHA512

f5948e198580b90384250dd61094bffa1980bf683699698f6ed2421468de688a2d7230a5f8f3df11665e5748ecdd7f93fed809db488031bdcb5917cdf34f8e3c
SSDEEP

384:byjUAKP9PgBK0GpXjlOf1RyZEEI+njC1DPKocg8jTYZ+ZMSP2xlNb:bylMdRjlOf1R+dRnj8jKocg8jTa++Su5

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/681132f28e02a7e7011af471e4b0580d5032ab43c20e13f70cdf937db30e9785

681132f28e02a7e7011af471e4b0580d5032ab43c20e13f70cdf937db30e9785.7z
.7z

Password: infected
681132f28e02a7e7011af471e4b0580d5032ab43c20e13f70cdf937db30e9785
.exe windows:4 windows x86 arch:x86

17091ffe7a92a1f951c4345cec955da1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord666
ord520
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord100
ord617
ord619

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cym
Size: 20KB - Virtual size: 4KB