48fec1a84e7f11c113bf4bf13bc38428 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48fec1a84e7f11c113bf4bf13bc38428
Size

81KB
MD5

48fec1a84e7f11c113bf4bf13bc38428
SHA1

6d13d2241c0533222f2e9b0ad30cd5994127e7c6
SHA256

79eaca7cd6b963b2f96c81f7b610e94ec2352d4d761712ba473647673a157110
SHA512

fc027e6d3ca2fcc16d50fc31c9e1c9b85a5e9ef6a6cd6b30dce3a478a70479f20d8a08510e24bd785640fbcfb10fd6096bd9b6ca76e4ff9687439869083c9977
SSDEEP

1536:I6N5oC2PHct62m2THngv1flLW08mS5viPhIQYvPnfOmod:nN5b+HccJ2DiflLWxmdhIpvHod

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48fec1a84e7f11c113bf4bf13bc38428

Files

48fec1a84e7f11c113bf4bf13bc38428
.exe windows:4 windows x86 arch:x86

91bfbbe012e5bdfee7e47045d90073ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ