41447f00655270f1b4bfe74fa9c8d67a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41447f00655270f1b4bfe74fa9c8d67a
Size

20KB
MD5

41447f00655270f1b4bfe74fa9c8d67a
SHA1

5e66b3fe266aa69daf06b070091caded78fa47b1
SHA256

1cbb3b71856e959705a3c9c30e68b8196efd18638257ed2d3d3223eca716c332
SHA512

c00bf9a7e2825096b969e06e1082c86d37660ab000fcc2ab3a15a787c607d6f9e6933928b54420e23a28c61b7750784a37aab072579ef09e214027af5bab0d94
SSDEEP

192:FGUgLKZ86XrVC6AePXDZOmr1gmCVWwcwVltVdl2nhS3onAXsJn03I:FwKZphAePDZF1gyNQHH2hS4wkk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41447f00655270f1b4bfe74fa9c8d67a

Files

41447f00655270f1b4bfe74fa9c8d67a
.exe windows:4 windows x86 arch:x86

f75390370eed681495f1835b459b8faf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord576
ord685
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ