11f5046416eba84d309646942195795a | Triage

Sharing

General

Target

11f5046416eba84d309646942195795a
Size

91KB
MD5

11f5046416eba84d309646942195795a
SHA1

30eff42aea259e2e4922fb967b5f99db1ca2ef5d
SHA256

6e1ca2d9de70504dffc2b8dba70331c93586b09ce01df431d9514b355bc12ddf
SHA512

dfe44400586a95dee75eae1772f6728cb8d37824739838e179e904c5b2d32be3fd3df30e8a52b26ce17c88091d0771ffb2317ca20f617cef7240b09b2762b42f
SSDEEP

1536:1Ak3tFEmg5Tf9u87ovKr2CshxHGK7HqUT60ekk:+0JgZfYvvKrmvmGHq4tk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f5046416eba84d309646942195795a

Files

11f5046416eba84d309646942195795a
.exe windows:4 windows x86 arch:x86

43d06c7356c9e8f160f2724f5afa58a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord626
ord595
ord598
ord631
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ