4897dafa365c87fac2b8c12d1c62beaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4897dafa365c87fac2b8c12d1c62beaf
Size

28KB
MD5

4897dafa365c87fac2b8c12d1c62beaf
SHA1

b5190a020eba07dc2d6f3793f2a1f6ace8cc619b
SHA256

68d8293d25bf591e4959a3540322c4f26b0be0185fb3539db5784c987a2d71e9
SHA512

1bd99a1ee6273f48ca3c8a1065f1a047c020f5db7f0181e9400f4f59875042f7c9918caf7d7e72054f8c98136cea9a04fa66190f72c40ab610e1f1a043ba36fd
SSDEEP

384:KN6dHcM3y/FgMY/lnflPirLsIcKjKKqCCSJ4lD/hiIDgqgS:ZdHC/FgMY/lfI5uSTKgqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4897dafa365c87fac2b8c12d1c62beaf

Files

4897dafa365c87fac2b8c12d1c62beaf
.exe windows:4 windows x86 arch:x86

3931d856198fc0c285ee48cbcf10dfca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ