ed197dce2bb98d7c0e11abf820b4bc5794b88f5a5135fa4afe46a3702d7ade5fN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed197dce2bb98d7c0e11abf820b4bc5794b88f5a5135fa4afe46a3702d7ade5fN
Size

40KB
MD5

7a4a277a92c2227e2cd727ea9016b730
SHA1

1797f4cd86c0327b203e18d7c05deb707b2fd7f1
SHA256

ed197dce2bb98d7c0e11abf820b4bc5794b88f5a5135fa4afe46a3702d7ade5f
SHA512

981344256975350130e7e5c7b34f13bbc4455c5293083e0535cd2af280160ab862459dd8926c770c5453f464134e5873468eedeb51c45d6e86fed130155fda93
SSDEEP

768:Dufko/XW2pkrUR+Oup8F9bdHXtHs7CQpcdHoCCvc:DlApkAA8F95NWee1vc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed197dce2bb98d7c0e11abf820b4bc5794b88f5a5135fa4afe46a3702d7ade5fN

Files

ed197dce2bb98d7c0e11abf820b4bc5794b88f5a5135fa4afe46a3702d7ade5fN
.exe windows:4 windows x86 arch:x86

8a0a5343feaaabb3dea2557cc7b45ead

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ