4bba3da6c8efe422f706c001ddc5266e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bba3da6c8efe422f706c001ddc5266e
Size

52KB
MD5

4bba3da6c8efe422f706c001ddc5266e
SHA1

c5c4bbb89ce90f1f650d556c26e8e017e26040a0
SHA256

3fe950e2e14d29440bce339794f3b4cd880bb98246b8e4a26712e262879abe94
SHA512

8aa6660fad0e9fff98476e719ae2d5f0c16d0fe0df8759fdd92b722f0304e680d3c2721e577620581e000c0152dc2b0a46e710425903e982e93fa467b806d8f7
SSDEEP

768:7eB9HP6Eqy+mO0ZrFhJbwGEaS4DVa+ZtQIeG9:7m9HPzqpvSr2aSkJZG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bba3da6c8efe422f706c001ddc5266e

Files

4bba3da6c8efe422f706c001ddc5266e
.exe windows:4 windows x86 arch:x86

cb0f2e1d6a8fdd97e4b187df08ea9ff3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord586
MethCallEngine
ord518
ord664
ord301
ord598
ord307
ord709
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord644
ord647
ord572
ord573
ord100
ord617
ord618

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ