8ca119299b010b5302bc0824cb881b175ed8da3f3280d61db723961ce79e6c89N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ca119299b010b5302bc0824cb881b175ed8da3f3280d61db723961ce79e6c89N
Size

40KB
MD5

3524d519127b67faec21c41b2c172250
SHA1

d1dbaecc050812a9f5b0ae50ce684be43fa4cd03
SHA256

8ca119299b010b5302bc0824cb881b175ed8da3f3280d61db723961ce79e6c89
SHA512

e28447b7e31b18e31693c1b66d36d77aeecc0e8e95542585b0cc14e59550b81e6f8cf144a4ca168a72a342c1d6fe630d25a58dad304501117ade32fe7cc4e343
SSDEEP

384:/J7940be5fdJGSJ6aUAMlltLB6GFMan9FtFtFtDVyJZHqwIVICSJicdPhhvGI6A:/JO0Qii6aU3JfR9HHHCqlcJXdZh16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ca119299b010b5302bc0824cb881b175ed8da3f3280d61db723961ce79e6c89N

Files

8ca119299b010b5302bc0824cb881b175ed8da3f3280d61db723961ce79e6c89N
.exe windows:4 windows x86 arch:x86

245032a982d56b01ab1b9ee9988f5fdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ