ce0ec985e4fe492978c76d24aa829d1aba7b804ece39f1025d54e35c42af1cd9N | Triage

Sharing

General

Target

ce0ec985e4fe492978c76d24aa829d1aba7b804ece39f1025d54e35c42af1cd9N
Size

88KB
MD5

fcdef01b16d5bcb9771b7580d2990900
SHA1

b22898f553ae9595b028fd86e028a0a61080e4aa
SHA256

ce0ec985e4fe492978c76d24aa829d1aba7b804ece39f1025d54e35c42af1cd9
SHA512

e4e4752acd68eee2b06f784e9366ae26052024dda0dd5b3687125e147cdb7cfc97b1baa80a5e64eff5372c2098e61ce2620664c14d2a434727f5b632c856190d
SSDEEP

1536:cQ9mRZh2NYaE0G830MMnQACS7TaGUryuaHxNZbmfzgmJ0:v9mRZh2Ox0j30M2SGyOHxq1J0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce0ec985e4fe492978c76d24aa829d1aba7b804ece39f1025d54e35c42af1cd9N

Files

ce0ec985e4fe492978c76d24aa829d1aba7b804ece39f1025d54e35c42af1cd9N
.exe windows:4 windows x86 arch:x86

a3be736ba74958f3dc8dd295ec266782

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord558
ord592
ord595
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord605
ord607
ProcCallEngine
ord537
ord685
ord100
ord689
ord616
ord618

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

picozpl
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE