04a89d2e21350ea087d003e8b619c62b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a89d2e21350ea087d003e8b619c62b
Size

156KB
MD5

04a89d2e21350ea087d003e8b619c62b
SHA1

4e79604cff4dd540656577a06f78b54b2ca9c105
SHA256

652f9b0dcaa537dba81855c38e24072e4fac1486122ce04da6ea2baa8b128b19
SHA512

28e7460bb54279b260ea07824f5d215d3d4162404db45cd0b7091b7b890b946ff5cfb6ab6591120f606f341502fb32a16f9fa9e055d76487191f82af5622f914
SSDEEP

1536:/Km2Jgmev7ZgNJp2AUCGsdmug9zETToCQXD3ClSUxD+wfsJgm4Km:F/v7EiQGsdmuAzETToCPSGfV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a89d2e21350ea087d003e8b619c62b

Files

04a89d2e21350ea087d003e8b619c62b
.exe windows:4 windows x86 arch:x86

56f1832c76d8f24eb4b69242b57727e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord585
ord586
ord587
ord588
MethCallEngine
ord516
ord518
ord593
ord594
ord595
ord596
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ProcCallEngine
ord535
ord537
ord645
ord570
ord648
ord681
ord100
ord614
ord617
ord618
ord619
ord581

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ