42ec9db64784d7dc8ab0f6501730e8fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42ec9db64784d7dc8ab0f6501730e8fe
Size

20KB
MD5

42ec9db64784d7dc8ab0f6501730e8fe
SHA1

ddfbd6dc43c169277c96befacda441d714637ecb
SHA256

f608e0a66af7b0fb6ac10d0c0de91c9150fe3c336e770b7eff167dfcba86eb8a
SHA512

22c58d1d80c6a0b5e416f3bebd7b0d1c2b378ccc096440c672394579536306e0b62f28efd4d53c1322eb31fb95a249091359667b42c6e194c36f3bbdcd42ee4a
SSDEEP

192:ynHyFqud6aeLRKLBxKk15omDY4UAq7eNTWELc6daGSsM:yHyFqu8aNbKAimDWa1D1M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ec9db64784d7dc8ab0f6501730e8fe

Files

42ec9db64784d7dc8ab0f6501730e8fe
.exe windows:4 windows x86 arch:x86

49f3c788355bf75223988fa6ee149efb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord626
ord666
ord593
ord594
ord595
ord632
ord526
ord528
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord535
ord570
ord681
ord100
ord616
ord617
ord619

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ