40e59aec2fc588394896ed5aa1004802 | Triage

Sharing

General

Target

40e59aec2fc588394896ed5aa1004802
Size

360KB
MD5

40e59aec2fc588394896ed5aa1004802
SHA1

c9780e5ace83d93163c6e549f13a78d781598b54
SHA256

c6113e0a9065891fa13e47f12a359e0bbe744acc02e885b9ba4b950946f0e49a
SHA512

59e4597b615ff7dab06f8d0b8bae4edecd3c6bdb646a6bb0a2ab3010eeaee21f3db280774cc7dd3d1a0bf77a2a31d702e9cd3e0ebcc51b1d01c75d13f19a250a
SSDEEP

6144:qXw/YRpjflWowwLIXQJ3YY9ZX9yWeQ5f3zJ4W1Mkpc31hu3ErKeXJ9ez6vJpHPW8:qXw/K9lWowgIgJHl/z91MUc3Due59eyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e59aec2fc588394896ed5aa1004802

Files

40e59aec2fc588394896ed5aa1004802
.exe windows:4 windows x86 arch:x86

e9adafc3c22f0ff5ffd77f564d829ec2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ