1f42cbe5675298e1c057eb56a181a72f | Triage

Sharing

General

Target

1f42cbe5675298e1c057eb56a181a72f
Size

47KB
MD5

1f42cbe5675298e1c057eb56a181a72f
SHA1

14299b4632e99d153ae5f8d21e1e11fd9b7eb572
SHA256

f00e733f4c410d86998ca133f3a9f7064a0e463b80b83cb641a496179375eb8a
SHA512

b5fb818acb5c1ddc65e3369ef308daf5403ccd0a3f451e62c81a32c2f7717241dd7e0090c946b404ba87250411be5b43fbf1db94e8cf55a3eba6e32742626553
SSDEEP

384:4jS9HxWpqd91o6gPaiU7JJr9/r6/RcxZrCYAImokGGMEIZfXH3zwx23:4sUqd91h2aiU7JJWRKgGxP3zw43

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f42cbe5675298e1c057eb56a181a72f

Files

1f42cbe5675298e1c057eb56a181a72f
.exe windows:4 windows x86 arch:x86

1a28d9f3880b724d1634435fbae12380

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord617
ord581

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dem
Size: 88KB - Virtual size: 4KB