70eafd0bafd6e9b08363341d198b2f2f20bdca2ac3d3d9d83ecb08f0ba7cc28eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70eafd0bafd6e9b08363341d198b2f2f20bdca2ac3d3d9d83ecb08f0ba7cc28eN
Size

36KB
MD5

f969c4110880c6baabe481990b874820
SHA1

44b16260b7fb125dd0ce9eb53090f6ca0b9c8779
SHA256

70eafd0bafd6e9b08363341d198b2f2f20bdca2ac3d3d9d83ecb08f0ba7cc28e
SHA512

e2f687c28a136fd3f95db70fa1f0a08c0ce819109a2156bfd44e1cf0bc99609c65e9f7542480829dee4273e00a6c3dd9126d2eca80fafc63107e70c944578567
SSDEEP

768:sUXfmTR6v/x9VINA9gEQPAhZTIDQ5sHS35hS:sUvmTgv/SNAEFS3u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70eafd0bafd6e9b08363341d198b2f2f20bdca2ac3d3d9d83ecb08f0ba7cc28eN

Files

70eafd0bafd6e9b08363341d198b2f2f20bdca2ac3d3d9d83ecb08f0ba7cc28eN
.exe windows:4 windows x86 arch:x86

88884bbed89d7fa9e38306b6098eeda3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
MethCallEngine
ord517
ord519
ord626
ord666
ord593
ord594
ord595
ord598
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord716
ord534
ProcCallEngine
ord535
ord536
ord537
ord645
ord681
ord685
ord578
ord100
ord616
ord618

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ