12c4e93b130aabd15889cf7b9fa93c18 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12c4e93b130aabd15889cf7b9fa93c18
Size

65KB
MD5

12c4e93b130aabd15889cf7b9fa93c18
SHA1

fd8a00593cce4a5584272af448c0c6164959dc9a
SHA256

aeff4ee170a146c0b64ab9f7cd61f9a8df712a39d0c34666fd991aed029be455
SHA512

086099350ec50385328206139c9ccb1b013117b9b88b0173872b20e48489c36ec978bf117d5874113409c764788628ea4f7eb5cead0d36d8617a17d7509e5a94
SSDEEP

1536:eEqZ0jGPRYJnbSLXq+zDq39Y+vWQ+87OK8:+yjG5YVqXqIIyGWL8Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12c4e93b130aabd15889cf7b9fa93c18

Files

12c4e93b130aabd15889cf7b9fa93c18
.exe windows:4 windows x86 arch:x86

a410292dbf34624942d6a5ec810727cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pppp
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ