4f1d4c0e6449e654eb400341f3fe2d86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f1d4c0e6449e654eb400341f3fe2d86
Size

44KB
MD5

4f1d4c0e6449e654eb400341f3fe2d86
SHA1

af30d2cfa2c2f43900f77710353add99434858a6
SHA256

e771da80a8747accebf387c4a0da9d3c6542e538daf87b086b87e82eaa3c2060
SHA512

d83fb658c09fbad4d81ff720930c089fb6cb4328ad8717bc1627b9a0104cec8f2784ad342ce4002a6437e600a5833fa06d20083950b0e3643e3e2d6c0804bc19
SSDEEP

768:al9dQhld3gfOrliZSmTTp8VQfDrk7FXXq6dcEwzoqO:anYct73plbrEQwz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f1d4c0e6449e654eb400341f3fe2d86

Files

4f1d4c0e6449e654eb400341f3fe2d86
.exe windows:4 windows x86 arch:x86

3d0a736c37548b9d417ed088a7fdedc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord660
ord557
ord669
ord301
ord595
ord520
ord307
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord314
ord315
ord607
ord316
ord608
ord531
ProcCallEngine
ord537
ord645
ord570
ord648
ord681
ord685
ord100
ord610
ord612
ord616
ord617
ord540
ord618
ord619
ord545
ord581

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ