fd9dce60ba7b0f98f88496ddc5998bc1f8cb10d755b289d131264faabfaa8bda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd9dce60ba7b0f98f88496ddc5998bc1f8cb10d755b289d131264faabfaa8bda
Size

36KB
MD5

6b0f9de7f420e9f9ed7953b514b2415d
SHA1

f141c924b02ed4d293b3f4fd4a1035e4b6fc7675
SHA256

fd9dce60ba7b0f98f88496ddc5998bc1f8cb10d755b289d131264faabfaa8bda
SHA512

be8fcdb5a53c67693f31d202068fc31a496c5bd8918b43555a961887fa3d93c9ef6b49bd4d3a2dcd1287619856ab9ce928f9ac5848fcc39d21991901fec05efe
SSDEEP

768:g01gqztfYolsHIWNrofnGuuLxaD4jwlKeoxgx3RnvGezOGpHpYWWCwq:gIgqzmolsHIiofGuuED4CJowhnH5JiCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd9dce60ba7b0f98f88496ddc5998bc1f8cb10d755b289d131264faabfaa8bda

Files

fd9dce60ba7b0f98f88496ddc5998bc1f8cb10d755b289d131264faabfaa8bda
.exe windows:4 windows x86 arch:x86

29e3806deec411eeb9c84a5b5112ac75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord518
ord662
ord593
ord594
ord520
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord572
ord100
ord616
ord618
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ