1f4ed39b28f9e66733e54585cb5ce4b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f4ed39b28f9e66733e54585cb5ce4b2
Size

81KB
MD5

1f4ed39b28f9e66733e54585cb5ce4b2
SHA1

f943b3e9636ffe7c69913ec5d07050bf736ffa9b
SHA256

e8cf2ec4af92b5544a0beb23d3981827f824f9a7f71189152672ca904862b794
SHA512

fb3aa335eaece9191d29e718ba07a0eba156016bc239a822f455615e753731dfdaddef4218d93ef2a387fc08a9eb7b135d0b12be94e2bb85a43475bca75bebf8
SSDEEP

1536:vOyjv8mpxOWZyEKQZUcpwyDxUuEc25SLnLiCrWDSd4WWKekyoOMuTV:vOyYmpxOoZN25gSWdnhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f4ed39b28f9e66733e54585cb5ce4b2

Files

1f4ed39b28f9e66733e54585cb5ce4b2
.exe windows:4 windows x86 arch:x86

20eff9b5c3bc4aac16ed9e9e60afc3e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ