0480cfc916b0e540c12cc0e1a80640fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0480cfc916b0e540c12cc0e1a80640fd
Size

28KB
MD5

0480cfc916b0e540c12cc0e1a80640fd
SHA1

45cdd31103a8a40acd20cc69cad039d76e56a7b5
SHA256

43d275bad31d8dfa4d3492f0c31e779e3f82bc0b4b51dc3079370e78fc89d67c
SHA512

9be29d3a1d663e5de577c1268053dc38618e2cf49b0dfb254439d0710ace81546f74cc19ad7ae465776e6f604efe1b81472a07d5bd38eae5903eb15a01d4ddf1
SSDEEP

384:0N6dHcM3y/FgMY/lnflPir9sIcKjKKqCCSJ4lD/hiIDgqgS:jdHC/FgMY/lfIvuSTKgqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0480cfc916b0e540c12cc0e1a80640fd

Files

0480cfc916b0e540c12cc0e1a80640fd
.exe windows:4 windows x86 arch:x86

3931d856198fc0c285ee48cbcf10dfca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ