3459125f49fc6e2c1126c5df83f26feb | Triage

Sharing

General

Target

3459125f49fc6e2c1126c5df83f26feb
Size

108KB
MD5

3459125f49fc6e2c1126c5df83f26feb
SHA1

e553b55591b65b5b67db435ed914b9dd834607a0
SHA256

b87567d0396286794e3d261a14b2298c83ade156ff2abd0f933685b6469dcb77
SHA512

7859bc78d027ecef52c5f3af3fc28ae0a2c6fd7c29b08984427558e8dd70d6e7f7ea8de39d9faa0e15f56239169860381508ff738ecb657e00d196ea0a3c7ff6
SSDEEP

1536:TIDwz4bQ1QFHlLNT0rRt8ECYRlM73KxU40DzXn/8mcPkkJWhQ1xTXxok0m4t:TIDW4beeN7EllMmxU4AnUkkQ+1hXSx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3459125f49fc6e2c1126c5df83f26feb

Files

3459125f49fc6e2c1126c5df83f26feb
.exe windows:4 windows x86 arch:x86

063f29b6b40be5ed764ee8e8d93b5786

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord620
ord516
ord518
ord598
ord520
ord522
ord631
ord632
ord525
ord526
ord561
DllFunctionCall
ord563
ord670
ord600
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord681
ord578
ord100
ord616
ord617
ord619

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ