105143fe01cfdddf470dc36f9832e9f4e8b09669e3e484c88d5479d561c5f3e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

105143fe01cfdddf470dc36f9832e9f4e8b09669e3e484c88d5479d561c5f3e0
Size

32KB
MD5

fa764c7f84cce3a1ff32ff56afcd88a4
SHA1

cd8f5cd40f9138eebcc9d9668f16aca8a266e4b5
SHA256

105143fe01cfdddf470dc36f9832e9f4e8b09669e3e484c88d5479d561c5f3e0
SHA512

5de41bb8f9adefd4350e2bba3ac0aea292f62adf0fe81feaba8511f55ad94d61c131b2a00ae2df231a785669735329d4e6dd5db843e4c5eb89b02ddb4bac0eb7
SSDEEP

384:E5UhmzP+wOglCB5MZyNz676w0PFpFKrYutO/ASIT9C980kts0aQiu:EOhenOglCB5MZSz6uPFpFKrYut1sFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
105143fe01cfdddf470dc36f9832e9f4e8b09669e3e484c88d5479d561c5f3e0

Files

105143fe01cfdddf470dc36f9832e9f4e8b09669e3e484c88d5479d561c5f3e0
.exe windows:4 windows x86 arch:x86

d09b6d44a213fd2ac71ee25d214aa37f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord571
ord685
ord100
ord616
ord617

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ