f602502430b36b463bab3c667ffb3142 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f602502430b36b463bab3c667ffb3142
Size

40KB
MD5

f602502430b36b463bab3c667ffb3142
SHA1

49a63f80f4fce880b252cffac03f083aba38216d
SHA256

cb7444f54022b8e5990b09a2ccc87dbd8db4edf149134191b44ec7e9ac61d1b0
SHA512

7ee5c016e7af9f1326e3ff5ba75e50e9ee0962cc4bd69e1e3ddea641b9a69548c645e4b0e5fe378dcce0e2b5871c4eb7347d608630200a7900ccb3ca10403260
SSDEEP

768:WMmfIz1XaDbZCUU6OpY9x0dHXOHk3CCecGH9C/vc:WKzubZE6IY9x6w4RCsvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f602502430b36b463bab3c667ffb3142

Files

f602502430b36b463bab3c667ffb3142
.exe windows:4 windows x86 arch:x86

8a0a5343feaaabb3dea2557cc7b45ead

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ