12e41907cc7c919b30706f5c0f7da9ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12e41907cc7c919b30706f5c0f7da9ac
Size

648KB
MD5

12e41907cc7c919b30706f5c0f7da9ac
SHA1

ba589684e9f961e16cd3daae4b42ea7327626477
SHA256

c619dfd0d3540b87616f3c2362fb0175c9566a54c0b73f3a4ad909300c88148d
SHA512

c33c0f70395706f4d012a618e2c3db404a4219d2c1eb0b34bb867ec617976646ea33bb01757d830ec3f7eae232690f6ccc70a9377f1d9b2d02262767c7828cef
SSDEEP

12288:WcAlSoiaUwBObS0I0sG68aOQy08JWcckEMOrGYlrTogv:aZPBObBIO68sL8kc5EMOr9lpv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12e41907cc7c919b30706f5c0f7da9ac

Files

12e41907cc7c919b30706f5c0f7da9ac
.exe windows:4 windows x86 arch:x86

81323132f0590963c41d24d5ce7d721d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord593
ord594
ord598
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord578
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 624KB - Virtual size: 623KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ