41b47615d6932c62d2f5668301942365 | Triage

Sharing

General

Target

41b47615d6932c62d2f5668301942365
Size

12KB
MD5

41b47615d6932c62d2f5668301942365
SHA1

8d757082cfe9139e05e1198802fbb9ccb5cbd714
SHA256

862ef1715679b8c823a3df005de4a0545f3e457640ebf94fffbbc2a28a06a246
SHA512

03dc26386aa1164157e6947bdbf005359aba0be52b02dca9b4169257dbcd436ff0c048165e3f21c45e225b185c7ddbc1180b5f7dff347351e350221998ab2499
SSDEEP

96:IDcWI16L4RmrFmFi0VwqCOG26cGa2Uvg23w6xatAJ15SgRhKl4NtJH7IBI:Rr1k4RGpiPGMGaTL3t8iJndRhqI2I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b47615d6932c62d2f5668301942365

Files

41b47615d6932c62d2f5668301942365
.exe windows:4 windows x86 arch:x86

3a7ad8acac51aad13d0b521eae881eda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
ord617
ord619

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE