46a56387ac7a5971f69c1450f24b1dd9 | Triage

Sharing

General

Target

46a56387ac7a5971f69c1450f24b1dd9
Size

112KB
MD5

46a56387ac7a5971f69c1450f24b1dd9
SHA1

091f5e3344515804358e1e54267f65d6462d570f
SHA256

e137de30072ec1b91c24f8027e31baf283f1724a9aecba5dccc259ef28a12765
SHA512

a9bec726923421a50e7ee9b029b41eeba51210baac509a1481a9964863d6c0a955fcc425330e3e9b8702c570079763e3d9e8884c64f0694960e381917624bcf4
SSDEEP

1536:5KcV+YvTaJdf8RzX5WCA0bpJEkXSDW0xgEkqmQGJ+Ii+Gv0w+BO2ouYdty8zSq:4yrydU1QCA0NWki8PqhR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46a56387ac7a5971f69c1450f24b1dd9

Files

46a56387ac7a5971f69c1450f24b1dd9
.exe windows:4 windows x86 arch:x86

1d745c239aec34e3b3659e2e7f8aba26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord584
ord585
ord587
MethCallEngine
ord516
ord666
ord593
ord595
ord598
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord575
ord100
ord617

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 498KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ