4346b6cc0e4b62cc45ca38587fd862a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4346b6cc0e4b62cc45ca38587fd862a3
Size

700KB
MD5

4346b6cc0e4b62cc45ca38587fd862a3
SHA1

f65d5d2657ed7eea09fa6077bcf8a17cf9994e63
SHA256

e30d1a5fbcc212b7326924fca9b04525602a92abe57f1dcc51836f15181d052f
SHA512

18688f67a795e56dc91a11e8fd64727403455e45f5d95cf78598adc64cf804d12891472aa81626ff66876779d265e54fa945e14cbe6065ea33aad37e7e546740
SSDEEP

12288:O+Z+ikoS6fWMh2FBuRM+GzvQtBR4yUTXPlofjH9Jv+:Ow7koS63h2jHrzvQ5uT/lofjdJv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4346b6cc0e4b62cc45ca38587fd862a3

Files

4346b6cc0e4b62cc45ca38587fd862a3
.exe windows:4 windows x86 arch:x86

2afdd4f403a3ad64c6c4adbe1d38a60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 684KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ