4e5adeb0558f074aab44705eb501cf3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e5adeb0558f074aab44705eb501cf3a
Size

111KB
MD5

4e5adeb0558f074aab44705eb501cf3a
SHA1

df299031d3a4f7d2986061f347efc694ca461e52
SHA256

7ae2631bc439376f0de38643ec74e00ac4ce791b0bd396c3f6d2d36561164078
SHA512

6072aae083c27c96e725acdc5c332772e7857edb429e25083a609ebdad4e2d09f1a33c9a740f5941ff9fc615102928eec0d80667215bf6fa4d902cafcfbec774
SSDEEP

768:sduwfCcMlY4blNqeCjoHP34DGltCJWx+7AppL4zG4dslM8lP+wgG0SXdkUr9AeXR:sdFcLl9LlN+aLHM8WSXjyk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e5adeb0558f074aab44705eb501cf3a

Files

4e5adeb0558f074aab44705eb501cf3a
.exe windows:4 windows x86 arch:x86

c6c968ae7809dc065deb7857b5ea8d8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord660
ord666
ord593
ord594
ord704
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord670
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord573
ord685
ord100
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ