0f659dec7213d244ebd6fb42cf85981b6a55e91b7f4d1db1dbfa9e21c9d7e633 | Triage

Sharing

General

Target

0f659dec7213d244ebd6fb42cf85981b6a55e91b7f4d1db1dbfa9e21c9d7e633
Size

100KB
MD5

e56c93a71f5733ebc322a33658d19822
SHA1

dbfc91851cffa4dcc8ef2bd394f14e7e9d3da139
SHA256

0f659dec7213d244ebd6fb42cf85981b6a55e91b7f4d1db1dbfa9e21c9d7e633
SHA512

edc74826f32c148484509af0e4b8f55d66e16b10cb52d0ec2c43342d215ecee873fba7a56a8f2b43d133d2057e273d70b60d44e1fcf5376733a666bc701a859f
SSDEEP

1536:bEOwgFowSgnVVVHzExnAdgVxDSMnEiqIYdfi/GExtulSpn:4rwanDVxjqdIntulS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f659dec7213d244ebd6fb42cf85981b6a55e91b7f4d1db1dbfa9e21c9d7e633

Files

0f659dec7213d244ebd6fb42cf85981b6a55e91b7f4d1db1dbfa9e21c9d7e633
.exe windows:4 windows x86 arch:x86

b7dde384389c4a1dda62a796237d1cbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord556
ord666
ord592
ord595
ord598
ord709
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord535
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ