42227a3f742b21f07202bf5361fd0ba6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42227a3f742b21f07202bf5361fd0ba6
Size

184KB
MD5

42227a3f742b21f07202bf5361fd0ba6
SHA1

a55ad7b3caa31a6f3baf697d9e8ba2ff8eb9741a
SHA256

a436284f21639bab2b1d91a53222a7ebef8443aedef683857ea49307fa025ad7
SHA512

557b414354cd161dcff06c517844db9c2b1b0b6187c3947780b02ce82597e5b5d9adad053c3c00fe605cc0de7e5e68eaa9b5679739920f11d928e1434078f3e7
SSDEEP

3072:V0Kj5IquTkIpR7XkL4U+7cAAUxuzVQkZVJZDFFWTWodteRzRLd59xyLejRIaI:O+DI/KH+tBkZbZDfme9LMII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42227a3f742b21f07202bf5361fd0ba6

Files

42227a3f742b21f07202bf5361fd0ba6
.exe windows:4 windows x86 arch:x86

cba247393c2ae0c315b000cd2c1fcb5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord666
ord598
ord522
ord631
ord525
ord632
ord526
ord561
DllFunctionCall
ord563
ord670
ord600
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord681
ord578
ord100
ord616
ord617
ord619

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ