02459d8ff0d6f78b085b5bb8f00149bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02459d8ff0d6f78b085b5bb8f00149bb
Size

16KB
MD5

02459d8ff0d6f78b085b5bb8f00149bb
SHA1

3c5b96c283278023f50873a2abc7fba78b360110
SHA256

541cd0ce3b9e67e99abd589b72f3a5098d1a531c1058db61fabcf4f80a17554f
SHA512

9e6b79efc08e07c9335d2e3fe52c0ea271fc9e145ae04760cab45cb15907771d8decacc09ae8ee85d70572290dfbfca77f714e5eddfb3ec8842ebf5c40c2b190
SSDEEP

96:RV8UoZzEMucTuzP57cxZAjxaI+BcJxf4CHQza50S90lhM0be/DM2:MlhEMhgVc7AjX7T4CHwaaSml7CLM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02459d8ff0d6f78b085b5bb8f00149bb

Files

02459d8ff0d6f78b085b5bb8f00149bb
.exe windows:4 windows x86 arch:x86

d0f8959e375bef0e83c1364f496839aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord570
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ