4b8ff03dfd717eced1a3eb099e62a439610614f75ce130f8ceb42fd8b78494b6 | Triage

Sharing

General

Target

4b8ff03dfd717eced1a3eb099e62a439610614f75ce130f8ceb42fd8b78494b6
Size

216KB
MD5

e1f4a1cc75ad4e188cd39edbc2a16a59
SHA1

eb0bc1ad4896553c6b454635a057f3eabb3706cd
SHA256

4b8ff03dfd717eced1a3eb099e62a439610614f75ce130f8ceb42fd8b78494b6
SHA512

0588b0c38b78eace45924127249676cb4bb1e1c4af3070e328c0981b870c6b2f1346d630cac3ff3057a50d995bd01015bc92a89ac12b46decf0bd1403adc3495
SSDEEP

3072:QCCjNDyLIkP8bOu9GypqClkTtgWpzf72Wyxqamd:sIQ9GypqCLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b8ff03dfd717eced1a3eb099e62a439610614f75ce130f8ceb42fd8b78494b6

Files

4b8ff03dfd717eced1a3eb099e62a439610614f75ce130f8ceb42fd8b78494b6
.exe windows x86

a5962b9e9481e76fb63081f33aacf262

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord553
ord660
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord560
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ProcCallEngine
ord646
ord685
ord100
ord610
ord612
ord617

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ