b4b382e2ed5f761cac862a5cd043284b02f882dae920124a9aed4fbac9c1db5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4b382e2ed5f761cac862a5cd043284b02f882dae920124a9aed4fbac9c1db5c
Size

40KB
MD5

40667ab42f89a82882bdcc52021a60ac
SHA1

d8c0eb7eca58895047e2746a32cb3ed1de42e5e3
SHA256

b4b382e2ed5f761cac862a5cd043284b02f882dae920124a9aed4fbac9c1db5c
SHA512

4f5277e5c9c02977f09025f34bc37f6c34bfb6119f6bbc6c5bf78464729baef71e35138e8b8d46cac935e8172ea754a1fd372aef1e3bc58f56db607128ee977e
SSDEEP

384:61LrA8VO6zcfA4U/IxAnERR2PGOTTTx8JcfoktRxdEhXvQrWRE4m6r/WE1Lr:orWOcfAVLnAuTTTHFiYUT7/Xr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b382e2ed5f761cac862a5cd043284b02f882dae920124a9aed4fbac9c1db5c

Files

b4b382e2ed5f761cac862a5cd043284b02f882dae920124a9aed4fbac9c1db5c
.exe windows x86

960c3de9b58daf2f5f0fdf040a7175f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord595
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord537
ord645
ord576
ord100
ord579
ord616
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ