44fc095a2cbc1077ccc972aaca9a3481 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44fc095a2cbc1077ccc972aaca9a3481
Size

171KB
MD5

44fc095a2cbc1077ccc972aaca9a3481
SHA1

ffe3d9efde901df7a36b117b02ab8bfcfdcabec4
SHA256

c07dde4dc1701de937591f06df0818c5c582d7520a5b0c91fdee7dddb24c9621
SHA512

17e4ea4bf3bb31c19e5c60ad9678906bfd6dfe1180a1aa592711b42b9e085f052b1f4c27cb4f872046dcd0bb6737cc6e8f3bbd5832f9feacb51805cf5a0d5ef2
SSDEEP

3072:MTk02352DQfGwI7phU57ViTD233/3VQXhrEYFsWB8AT8lb5v7dm7WnFj5aHEE10o:MQ0052DQfHAUtgTiH9g7yb5dNFtWmxj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44fc095a2cbc1077ccc972aaca9a3481

Files

44fc095a2cbc1077ccc972aaca9a3481
.exe windows:4 windows x86 arch:x86

d1a0a39215304aeb5396819efb3dcd84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaCopyBytes

Sections

.text
Size: 157KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE