9543b8f415127162b0ca81a60b23dde0a20a9f0e8114fad36ee8b0d0fa474a68N | Triage

Sharing

General

Target

9543b8f415127162b0ca81a60b23dde0a20a9f0e8114fad36ee8b0d0fa474a68N
Size

124KB
MD5

f6bbf3bc488b528e5a9dc4cf1377fa00
SHA1

6a0fbc3cced9e61ae8765a0ed7b44723915be791
SHA256

9543b8f415127162b0ca81a60b23dde0a20a9f0e8114fad36ee8b0d0fa474a68
SHA512

cdf9e3cd2c674f7c5e1f1702be3468bdef3da527631be9cb361034cf2a2872672ab86b9f8ced22995ef49c7caa297885081048e10d366d9bf79dc3ae5d249cfb
SSDEEP

1536:/ebuEFBx+/67NxkiQixA+alh98r8Y9USv1jyHwo7JaS4:GbuEFT+/67gjH8ri8KwQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9543b8f415127162b0ca81a60b23dde0a20a9f0e8114fad36ee8b0d0fa474a68N

Files

9543b8f415127162b0ca81a60b23dde0a20a9f0e8114fad36ee8b0d0fa474a68N
.exe windows:4 windows x86 arch:x86

014aef72843077278a3b972be07b3c5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord595
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord685
ord578
ord100
ord613
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ