1241e1a204c1ce625621aed4b8ad3098 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1241e1a204c1ce625621aed4b8ad3098
Size

52KB
MD5

1241e1a204c1ce625621aed4b8ad3098
SHA1

2bd9c3bfd6b7ce80b70f3eca4b5cebe4d51e07a4
SHA256

6b28d3ce562acc9f9d5b50c7e1ba854d078fccf8d861ede2984318191c250838
SHA512

0660fd20a7995f5544477b124cca629057b20ad5af6e39d7533a02201755e3202c619ee0b7882eb800c81132a98704ce5a1a6d3b09b2b48efb08047bb6004adc
SSDEEP

768:alWGYNMZc2WXKHrxUvfMfgEoLnj5XsyjGUHkfhxWTcN5:nGYnGrxVY3L9XsyjGWkfhfN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1241e1a204c1ce625621aed4b8ad3098

Files

1241e1a204c1ce625621aed4b8ad3098
.exe windows:4 windows x86 arch:x86

bdcb92aed3f33976625806a0e304bc47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord626
ord666
ord598
ord526
DllFunctionCall
ord563
ord670
ord601
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord100
ord616
ord617
ord581

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ