b22fd8c729361169c5e6afb32f863260N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b22fd8c729361169c5e6afb32f863260N
Size

67KB
MD5

b22fd8c729361169c5e6afb32f863260
SHA1

8843d55f4d9e2633dd3ea548d3b9dfd3b73fee83
SHA256

d299aaa168ea0d57efd6c84cd069d931c016859ca4eaf775a34e817e184bbde6
SHA512

00320ac3b472ae2efbd67d62366a2513c2ed51256f4f8d0e1f19d00f2ce459b78ea031389a8965944b7ba69dce4275a1e75a26446734e1aa4235eda02cb5a560
SSDEEP

768:EaZ+QyvFMMvgOpU/WGGIegFDhNmvdMYXqYt1NEDIefZsD:EW+vgO2/rEgzNLoZt1y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b22fd8c729361169c5e6afb32f863260N

Files

b22fd8c729361169c5e6afb32f863260N
.exe windows:4 windows x86 arch:x86

f2fb875db3fe21466ee586508d74c8b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE