1341dc6cae38345df3f02ac26b0ac3d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1341dc6cae38345df3f02ac26b0ac3d9
Size

72KB
MD5

1341dc6cae38345df3f02ac26b0ac3d9
SHA1

10ca01d99fe19310b4c43c072c1da7ff9658b6dd
SHA256

29434306327fc0f00038c5cf466378c187e21b727c56c4491b58a28a783976e7
SHA512

a3af74d74ba14dba9d4a1cb9128029dd7d4452770858e78b9ba3aa1e943be2cc01a287457b36e297841a7a60abf0856710f8012a9bc279080bf53f4710344613
SSDEEP

1536:LSnC6uJRoQJHI+gqPBX1XhEyZN5KVX2X6fuLphk8:LBjoQJHI+gqFPEyZN5GGqcfk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1341dc6cae38345df3f02ac26b0ac3d9

Files

1341dc6cae38345df3f02ac26b0ac3d9
.exe windows:4 windows x86 arch:x86

ea69993f4d6cff08e500e1cb9d5b1916

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord595
ord522
ord631
ord632
ord526
ord561
DllFunctionCall
ord563
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord681
ord100
ord617
ord619

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ