a61f4b15afabfced8871d9bdcda5b1e90687eaf74bbb3f7f2909293bdff93954N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a61f4b15afabfced8871d9bdcda5b1e90687eaf74bbb3f7f2909293bdff93954N
Size

40KB
MD5

985a860b43d22d0596e63602cef77210
SHA1

7b8f18cc03ee23befcbaf688b15019c66e6697b9
SHA256

a61f4b15afabfced8871d9bdcda5b1e90687eaf74bbb3f7f2909293bdff93954
SHA512

81eb3abc9bc647c87c7ef0d103be66e478a058c3b4f1f6a00b31f26b2c26a5e86d679e8e6ce461ca2dfbb6a1984565b9cf6e7e9d1adfdffee4a9c1b506c20a70
SSDEEP

384:/J7840be5fdJGSJ6aUAMlltLB6GFMan9FtFtFtDVyJZHqwIVICSJicdPhhrkA:/JL0Qii6aU3JfR9HHHCqlcJXdZhrk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a61f4b15afabfced8871d9bdcda5b1e90687eaf74bbb3f7f2909293bdff93954N

Files

a61f4b15afabfced8871d9bdcda5b1e90687eaf74bbb3f7f2909293bdff93954N
.exe windows:4 windows x86 arch:x86

245032a982d56b01ab1b9ee9988f5fdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ