40518699f3648f8bdb5f99b7d49a528f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40518699f3648f8bdb5f99b7d49a528f
Size

312KB
MD5

40518699f3648f8bdb5f99b7d49a528f
SHA1

8a8f65182059965a9dfe9a3db2daf421648d8d79
SHA256

e4f5f4b4f6553afb6e2f6fdda5ddfa866810d6641a53ebee7bd6aa7a0df996f4
SHA512

afc87e0b0372004589fbd4fef68254401fe5e7c3f60a4280001b43b948e54e4616e7c445d7c7b2d363400ecb6d13c49f494a0e5403bc50ef73d29e39147e9c6e
SSDEEP

3072:TS1FyD0JkP1vp/3/zM57VVAK/IBRJ3o3gBRnoBhQYAR1FyD0JkP1u:TH/LMUBRJ4QBRoB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40518699f3648f8bdb5f99b7d49a528f

Files

40518699f3648f8bdb5f99b7d49a528f
.exe windows:4 windows x86 arch:x86

fe6d2bb370608afa92d23d780536306d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord693
ord588
MethCallEngine
EVENT_SINK_Invoke
ord629
ord667
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord592
ord593
ord300
ord594
ord595
ord303
ord598
ord306
ord520
ord309
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord716
ord717
ord319
ProcCallEngine
ord535
ord644
ord572
ord573
EVENT_SINK2_AddRef
ord681
ord685
ord100
ord320
ord321
ord616
ord617
ord619
ord650
ord546

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ