128eaa7489f8f9d251fdc56d3f22f67d441de0ff5365e6abda9a981e1d2bf499N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

128eaa7489f8f9d251fdc56d3f22f67d441de0ff5365e6abda9a981e1d2bf499N
Size

36KB
MD5

dec7476040f2bbe89703fff199fa44c0
SHA1

bdd5915a077e17fee0ef2f9178541215cced70b6
SHA256

128eaa7489f8f9d251fdc56d3f22f67d441de0ff5365e6abda9a981e1d2bf499
SHA512

3fc626d570cafeb2e4c4626817764bbd0facb62acf2469e809812cfd86af8a22bb2ec6a75019e0d1d123c58569d412530f2edfb309960b4a4dd51efd4e135ba1
SSDEEP

768:gc1gqztfYolsHIWNrofnGuuLxaD4jwlKeoxgx3RnvGezOGpHpYWWqnq:gwgqzmolsHIiofGuuED4CJowhnH5Jiqq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
128eaa7489f8f9d251fdc56d3f22f67d441de0ff5365e6abda9a981e1d2bf499N

Files

128eaa7489f8f9d251fdc56d3f22f67d441de0ff5365e6abda9a981e1d2bf499N
.exe windows:4 windows x86 arch:x86

29e3806deec411eeb9c84a5b5112ac75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord518
ord662
ord593
ord594
ord520
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord572
ord100
ord616
ord618
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ