82634f213b217fab75bfa8b60f8305aa8ff41bd6c1ba888e417f21eb13f59a8cN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82634f213b217fab75bfa8b60f8305aa8ff41bd6c1ba888e417f21eb13f59a8cN
Size

40KB
MD5

a29af4976052ab0f04600cc8986638e0
SHA1

5d244e2e36b14704d3f95505efc90f4e56fdc4ee
SHA256

82634f213b217fab75bfa8b60f8305aa8ff41bd6c1ba888e417f21eb13f59a8c
SHA512

0c35d3937796aa9de80808a74f0d1a8992fe62b8e07bb0240217756f74392c83f7a5a5519283282062fcfcf4276d813d0d06fa3cb18dbd92d127e38aebfb3354
SSDEEP

384:/J7i40be5fdJGSJ6aUAMlltLB6GFMan9FtFtFtDVyJZHqwIVICSJicdPhhpOA:/J10Qii6aU3JfR9HHHCqlcJXdZhpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82634f213b217fab75bfa8b60f8305aa8ff41bd6c1ba888e417f21eb13f59a8cN

Files

82634f213b217fab75bfa8b60f8305aa8ff41bd6c1ba888e417f21eb13f59a8cN
.exe windows:4 windows x86 arch:x86

245032a982d56b01ab1b9ee9988f5fdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ