40bf354a2f5f69e307f9498660a7275c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40bf354a2f5f69e307f9498660a7275c
Size

64KB
MD5

40bf354a2f5f69e307f9498660a7275c
SHA1

8b43bf482c7f589d55c12d1066da4f193aeb7bbb
SHA256

4fe312ba8f103e4854f6587495146e342684f76874fb7937379062e56fc9110f
SHA512

71c12aa22bbcaccd14c281712f889f8342e06dd1bd70e0b2d4e0305d1ff8f285ec447a482bc79c47c89a27c6920dd525ba415887d37292cfd2fce960ce437b0a
SSDEEP

768:+wBVHpKTX6O91dbxSFhLfQmETEfax+T1i5JmuKFBXegYBn2RTijAvjx:+U4N91dbxCdomEToT1Z1e9AcI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40bf354a2f5f69e307f9498660a7275c

Files

40bf354a2f5f69e307f9498660a7275c
.exe windows:4 windows x86 arch:x86

4257211e9573ed5148db56d44d096951

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

msvbvm60

MethCallEngine
ord665
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA