000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3aN | Triage

Sharing

General

Target

000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3aN
Size

23KB
MD5

630ead1567da1adcf9b4839b65931f40
SHA1

9ed7e421a2b08941035f6ff64f23b7e39b657ee1
SHA256

000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3a
SHA512

83b91fd0977f03a02b1cdb0cddb95bca3048d305c82938c387cff509eeb6fb06ea27bf40cc007ab992da56da7b3040f5186840d1fc668d35a2db95ae808ecc55
SSDEEP

384:HPzrvlCK/aPdRI/lc6xJDnojCohobUGO2G0c6uegLYo0qsq5OKh6:HPtp/gRIN/bojCohobUT2w6S70q8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3aN

Files

000fb48bb8e7e913b03eb052438a3ee6ab3f5a811d25367a0192cda8769f5a3aN
.exe windows:4 windows x86 arch:x86

624eea9fad36748ad396b03c4679014f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord696
ord697
ord698
MethCallEngine
ord519
ord598
ord709
ord631
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord572
ord681
ord100
ord616
ord617

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ