4307ca950e1387dfc76cb331e849ec76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4307ca950e1387dfc76cb331e849ec76
Size

44KB
MD5

4307ca950e1387dfc76cb331e849ec76
SHA1

cb847d3cfb6a03e3a8e3984bce81a71d23141c5a
SHA256

79edd288c6be273dcfe79fc62b3d3c08bfdd76d4a7b169304338882d44e4c901
SHA512

e6b5f921205761ea41255808a08f02c923f706b09d182071b6976fda037491f401138a94c7264cc67100aa562ca43f89df844435c54e2ada7fe6566c18c63adf
SSDEEP

384:bjrOrNiCfcZuWbFJOeqIbwnY4tAiZ1E2I/e461+G1h9hCz4uIATMtzhB+1:PCIpFJ8nY4tAkE2SeTsL0hB+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4307ca950e1387dfc76cb331e849ec76

Files

4307ca950e1387dfc76cb331e849ec76
.exe windows:4 windows x86 arch:x86

20b124df1bc0c365c3ea59c5e562a728

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord695
MethCallEngine
ord629
ord595
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord569
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord531
ord717
ProcCallEngine
ord535
ord537
ord645
ord647
ord570
ord648
ord571
ord576
ord578
ord685
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ