40ce140696b3907cd20469a20d79b809 | Triage

Sharing

General

Target

40ce140696b3907cd20469a20d79b809
Size

40KB
MD5

40ce140696b3907cd20469a20d79b809
SHA1

2160bd60dd00194610a36fee55d6f81d19460ea6
SHA256

21f0e59c2ca23ffd9557a96beb46cea9f2e48996bcc7a05639b946b04b016db2
SHA512

2983b51dea32ced9ce2a21bf1bcadd86ff7d5415838d62d5f2ed37afbdf4ff79895215272ce7c4375c6316c17afbdb0a9dec7a2be9d59606eea7495a9400d6a4
SSDEEP

384:6Mp+uT8W6UBqeg0+fjy9YqgqP9yQBE9Bnac5O7sXLdJNE5T/+ZfJfaATsMKIs2Lq:6cD96UB+y6qHwQQBb5OwjfJfvsis2Lq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40ce140696b3907cd20469a20d79b809

Files

40ce140696b3907cd20469a20d79b809
.exe windows:4 windows x86 arch:x86

5913d6ab7501aeae2817b0e9e6de4069

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord187
MethCallEngine
ord598
ord307
ord709
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord100
ord614
ord616
ord618

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ