38945798c0696614ba37931897e7e470 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38945798c0696614ba37931897e7e470
Size

41KB
MD5

38945798c0696614ba37931897e7e470
SHA1

668414eeb6bf49d2c2e87a47b0c778791b5be9dd
SHA256

b6f40f7999859e489caa4309ec33f532a20d713ae1662d4bcd520a6763820b4f
SHA512

f89bb893839710bea096db08a781b4cfe8bfe10e15128dac6651947ad7d8dc0307346edb41f920fadafc62493b1ba802468d46ec29bdea91849255340044dfbd
SSDEEP

768:ecNM2iYPOzlUOsC/UbMwZ9ztTXpeuO2Y2/+riiZxSzpd:52zze7vBTsfC8RZxq/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38945798c0696614ba37931897e7e470

Files

38945798c0696614ba37931897e7e470
.exe windows:4 windows x86 arch:x86

dd1352569303e3b273bd3993f9bd7d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ