241fb7bd83d470d01a4ebbed708288b9 | Triage

Sharing

General

Target

241fb7bd83d470d01a4ebbed708288b9
Size

20KB
MD5

241fb7bd83d470d01a4ebbed708288b9
SHA1

32714b41c4935a649040ebd58c31f8759cb816b5
SHA256

2c7452ef248f8000da00758b93a7c7df6c7d7bc67306b52f2b475a45f28ff6d7
SHA512

bcb2114c93dc93153ae8674e3ec80225d621ea714df1216f2fbc875e526c0c991ffc924314422003ec37a3827391a4f7e6550895f3e17b6ec7bb6a4251ae1b23
SSDEEP

192:Fi6OIdjJFA3uy1NFlhNwStj/0t7dmK5zcVE2:FnOIdVFr06StI4VE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
241fb7bd83d470d01a4ebbed708288b9

Files

241fb7bd83d470d01a4ebbed708288b9
.exe windows:4 windows x86 arch:x86

587a34f4849202d3bb23e085443e1b70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord517
ord666
ord593
ord594
ord632
ord528
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord535
ord645
ord570
ord100
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ