04b05776b191df3618f0d5c0d763436e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04b05776b191df3618f0d5c0d763436e
Size

68KB
MD5

04b05776b191df3618f0d5c0d763436e
SHA1

823fe151921e5c4e9b34ab86a1384cebd0989f5b
SHA256

31e3d6388a0c2fed38257d82440df2b228baa4621f4bc768acac6e85b3909831
SHA512

b83eda427599542e5fdf9b779a007e19828afb5b87a7781d9e1565f94975559bae7d43330bc374a78499a19dffee181582f925ebb9113e4ec937521f973c9e1f
SSDEEP

768:4HqkbXMydzccPHwHkeWJ4Dyb2BShGxrd9Dn3HFK3GGOOCo:4KkAyNXHwE4BBbrl0NO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b05776b191df3618f0d5c0d763436e

Files

04b05776b191df3618f0d5c0d763436e
.exe windows:4 windows x86 arch:x86

d606caa32e5e982ebdc8c207acdb1297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord187
ord588
ord698
MethCallEngine
ord516
ord669
ord592
ord593
ord594
ord595
ord702
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord529
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ord318
ProcCallEngine
ord535
ord536
ord537
ord644
ord645
ord100
ord689
ord610
ord612
ord613
ord616
ord617
ord581

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ