44e6e44689031d0937fe53da111c5c1d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44e6e44689031d0937fe53da111c5c1d
Size

256KB
MD5

44e6e44689031d0937fe53da111c5c1d
SHA1

f8e409742c1ec7a2d9daaff034d8c88b3b8b1293
SHA256

818d18d1b31dbc451863662f44238b968bead29d3c7fb1d41a4f1b451779396a
SHA512

7279581776033a3bd67ffd4cdb0589cb1423e3d385354e38c3cd89e6025d41900e30c9e10dd596451e61c52aeac2e6ab5ba8602afe0fc90c3d8050a75aa13c4b
SSDEEP

6144:KuV4mKZ7Igo2oRi6LHo/v1sgn8zQAjoVvrcJ/OvhR4ZMJXbFmeT/:g7H5oxLHop81joVvO/gFJJv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e6e44689031d0937fe53da111c5c1d

Files

44e6e44689031d0937fe53da111c5c1d
.exe windows:4 windows x86 arch:x86

3f52f9424b5dcdb75a8bd2e3d0155230

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ