4e754d9d308ee6d36a90257c37b8ac48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e754d9d308ee6d36a90257c37b8ac48
Size

93KB
MD5

4e754d9d308ee6d36a90257c37b8ac48
SHA1

9ec6b17e2066aa9aaea5e32cbbe4aaaf87aec9c8
SHA256

77f6aabce24979c764e44413be8b182e8efc8778fba22a7057dd0707456bc2e6
SHA512

ea4f894217eac38bde661535e7d08688cd031bb7b2164943079f017a1d88b29255e7ee5532974f55c11ab7c92a62af3df3d0603812f8fef871f9eef3811e224e
SSDEEP

384:wSl5NI/W5aXprSXplNesnm77Wp0awMWE3kqZSU2ZNN:1cXRSXvNTm77awMHwUAX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e754d9d308ee6d36a90257c37b8ac48

Files

4e754d9d308ee6d36a90257c37b8ac48
.exe windows:4 windows x86 arch:x86

1ee459202d13685d56cc5faff4639e09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 76KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ