bd4cddda185391236a2638b6ca7794d0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd4cddda185391236a2638b6ca7794d0N
Size

60KB
MD5

bd4cddda185391236a2638b6ca7794d0
SHA1

1705e0d3fc5d7879e24dc1a06ec67172d3069f12
SHA256

265862eb2b7b9a49220597b1e0f52fc0e18934dbd1dbb4cb047993ea87c9c794
SHA512

a176864010d8a68baf0c6e23541011983773d0636871a512a723a0fe48942a521071b58c6fe40e77097394c26117fdde5ee20e493ad3f4449347784bb4e8ce4a
SSDEEP

1536:WckGY3NjdLwOiNMWBWMVP6D5x2LY23RU:8GGFMYD5x2E2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd4cddda185391236a2638b6ca7794d0N

Files

bd4cddda185391236a2638b6ca7794d0N
.exe windows:4 windows x86 arch:x86

2a6833f8a67f45a074ae38eed786ca2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord584
ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord714
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord431
ord616
ord617

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ