b89a5c1fea7c4d0d41475e6bd9164254680b65242f13dd5d812ca49cec5a2e34N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b89a5c1fea7c4d0d41475e6bd9164254680b65242f13dd5d812ca49cec5a2e34N
Size

88KB
MD5

b90d589d914c1d06a1d6fe0bab4177b0
SHA1

ebf9ec0b331c35699dc4b5852937cf90b762b81f
SHA256

b89a5c1fea7c4d0d41475e6bd9164254680b65242f13dd5d812ca49cec5a2e34
SHA512

962895cd0060e9eeb205d0c15b81027cb86c20b1067ebcada62b5906b5793b7c263d5c831b29c846e1271c1c79ff5252fb238db96558a6332060198020115531
SSDEEP

1536:vZmDK0gaXQCAXSA2W9BEz568GUqtRjohXhZcA:xmi+QjD2oBoU8nb1hZ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b89a5c1fea7c4d0d41475e6bd9164254680b65242f13dd5d812ca49cec5a2e34N

Files

b89a5c1fea7c4d0d41475e6bd9164254680b65242f13dd5d812ca49cec5a2e34N
.exe windows:4 windows x86 arch:x86

afc077b3c2f8782d9a7d278fff656cae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord553
ord595
ord520
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ProcCallEngine
ord576
ord577
ord100
ord610
ord612
ord613
ord617
ord619
ord542
ord547

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

XOR
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE