4e865d4fd0d89d9c09000004582daf05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e865d4fd0d89d9c09000004582daf05
Size

652KB
MD5

4e865d4fd0d89d9c09000004582daf05
SHA1

2e9637f3d824414705af657a6c3c2e883faeef1d
SHA256

e67d83dabe460475319879b851af03ccb1d4c534d744e0237f2b684d4827ebd2
SHA512

2c3744eb1a5d5d5541fa83defd590e5ddf1be660ec5d6bc30441e95ce73b77d00d332081fa55cef652de3ee784fe8becf71798f5c2f4aa93e1c5e03625a804f5
SSDEEP

12288:h2s0tuJ54lGKjWVc0Sqih4d/iEGWvFsWxkCEij:X0YJSXWV1SFhk57v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e865d4fd0d89d9c09000004582daf05

Files

4e865d4fd0d89d9c09000004582daf05
.exe windows:4 windows x86 arch:x86

9d1532518afc3658fe0f61bc528c2d34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
ord586
ord589
ord697
ord698
MethCallEngine
ord513
ord514
ord517
ord552
ord553
ord557
ord669
ord591
ord595
ord596
ord598
ord520
ord521
ord706
ord708
ord631
ord709
ord526
ord633
EVENT_SINK_AddRef
ord528
ord529
ord561
ord562
DllFunctionCall
ord564
ord673
ord568
ord569
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord714
ord530
ord531
ord532
ord535
ord536
ord538
ord539
ord646
ord647
ord572
ord574
ord682
ord100
ord610
ord612
ord613
ord616
ord617
ord651
ord652
ord546

Sections

.text
Size: 632KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ