44b50ab4ba0895c0810f0137057abc22 | Triage

Sharing

General

Target

44b50ab4ba0895c0810f0137057abc22
Size

164KB
MD5

44b50ab4ba0895c0810f0137057abc22
SHA1

b3fe6f2a6f9373cfda0c8ea8c82e18a44d5ae663
SHA256

ddcad6185c10c60530940b36ad4bf5fa93daba471a441621d437309cc941663e
SHA512

1fce8e302f733df5ab59a0fed54b51f54ea37217134980dffa0f3c0eb629a2e1dbb7550480f46b3adfa2a41051718eb57cdcdf2a8eb8dfa2fc9fa77f06af65f0
SSDEEP

1536:TAi2x2SLKEdDbxa7DmEtMzOzLq7d5XQNYwbkjqj9WL1reDQ+z1XdEd:jpOyyzD7vgQjqjEh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b50ab4ba0895c0810f0137057abc22

Files

44b50ab4ba0895c0810f0137057abc22
.exe windows:4 windows x86 arch:x86

9e6bcb7bb46b5e734ef916138186b387

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord535
ord573
ord681
ord100
ord617
ord619
ord581

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ