41ec4e52eff4656a3c41c0e4155ab355 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ec4e52eff4656a3c41c0e4155ab355
Size

256KB
MD5

41ec4e52eff4656a3c41c0e4155ab355
SHA1

a1f80eb716e6e182d5593dfafc2bd223b9b2f0ae
SHA256

4db9a6f8f0da014741fbfbc901bb4a98236efafac1a037b9f447678e9c98a4b8
SHA512

29381980993c950f08ab4eac24cdfb253840f484f23d4ec840a26d8f7e8e27880773b1cc0ee61e481eb6a959bfd363d126418eb541fecd13a73e916762448d4e
SSDEEP

6144:8wV9o+BjsAizoEAIF/PnnfLkGo1+qBF0F+tcquTlaSJrSyn7k:hnv4/VC1+I0F+tcfnrSy7k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ec4e52eff4656a3c41c0e4155ab355

Files

41ec4e52eff4656a3c41c0e4155ab355
.exe windows:4 windows x86 arch:x86

4c52ef1b578579e142fe4c098330b56b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ