449baac84adc63f66a0f09ea459df883 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

449baac84adc63f66a0f09ea459df883
Size

20KB
MD5

449baac84adc63f66a0f09ea459df883
SHA1

07fd7a2fd2c65d57335b2ad75ca859164d9d00af
SHA256

24c8c3183f0649a8d0fb85fff7798eeec9afac9533177c0a5a84bc2704c61aa5
SHA512

1cee228f0382927a1826c865860f3f6d06b1c0d12fa52801fa1c334a63e236e02a264064de2aa437b73a4c8cd623e82aaedc4bfdc2518437a6d9a241e8f5a5e0
SSDEEP

192:EJT+E+ljGNgy3e5zjmLc+RnVk9H0C7zl4lx9Amaj+R0E+Rn:cG8NX3gz6LUN7uDRaj+Rf+Rn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
449baac84adc63f66a0f09ea459df883

Files

449baac84adc63f66a0f09ea459df883
.exe windows:4 windows x86 arch:x86

5098fad9658ac3e2112f55f3b1142203

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord693
ord696
MethCallEngine
ord518
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord530
ord717
ProcCallEngine
ord644
ord647
ord100
ord689
ord610
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ