d82aaf927d2e81ef557a3f28082485dbc86bdaec51942628086abd34790a50c4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d82aaf927d2e81ef557a3f28082485dbc86bdaec51942628086abd34790a50c4N
Size

40KB
MD5

6d0730cdfd7fa0ca9db52e7ea5e346b0
SHA1

09046cc973fdf9808949234cbf1ba4c8eaf6a2d6
SHA256

d82aaf927d2e81ef557a3f28082485dbc86bdaec51942628086abd34790a50c4
SHA512

76f23b96e99190fb8ea05b637f5f6197686aaac602f93c6ce9996b1882374c0e4e668743839ab85017c66467a54ba3d3f8aeddb91355e96efb59e71ca17f44d1
SSDEEP

384:/J7a40be5fdJGSJ6aUAMlltLB6GFMan9FtFtFtDVyJZHqwIVICSJicdPhh0wA:/J10Qii6aU3JfR9HHHCqlcJXdZh0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d82aaf927d2e81ef557a3f28082485dbc86bdaec51942628086abd34790a50c4N

Files

d82aaf927d2e81ef557a3f28082485dbc86bdaec51942628086abd34790a50c4N
.exe windows:4 windows x86 arch:x86

245032a982d56b01ab1b9ee9988f5fdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ