040eb4a90d2bf161d08366915e6d3ac4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

040eb4a90d2bf161d08366915e6d3ac4
Size

824KB
MD5

040eb4a90d2bf161d08366915e6d3ac4
SHA1

0bae7545aea583004fe4cb89dc52d994c4e68bf4
SHA256

be78157045599d18e03abc863393a17df126576ef078c3d75295842d5aa14b9b
SHA512

f8270f456f3e7d21a646bc79d5675d9d953c289eb52934af4391491bfbabeda82c8500257713ef7a1ab568efc88d9d0c88a68246c8cf327d8202fa0f520ec146
SSDEEP

12288:Nzw0o6/fmyKIxKo5KC8DJCQxrmY2e4yq5CMP979KBilnGGPVqTNIqhS3YRA:X/3myK/DCOrmQmoMJsBPGUeqS3r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
040eb4a90d2bf161d08366915e6d3ac4

Files

040eb4a90d2bf161d08366915e6d3ac4
.exe windows:4 windows x86 arch:x86

c3d907998589aa82dbc94e4a345c9c56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord666
ord669
ord593
ord595
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord573
ord681
ord576
ord100
ord616
ord618

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 792KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ