4348580ee9b83bba6e911d567394633a | Triage

Sharing

General

Target

4348580ee9b83bba6e911d567394633a
Size

144KB
MD5

4348580ee9b83bba6e911d567394633a
SHA1

7d18360aa793502312b7ad5abf327a048450a4b8
SHA256

dce9d15b9d23a3c0e1591a904e93be379da3b55bd5e2ac83b62a15e5e46cab17
SHA512

752246e7a9571fd599e0efe5463e77cbf56249a6ceaf58de40d1969a58b81a18489c464c7b766af6d57ce9f4971b153ba9665e62a630974dfb356588784f0480
SSDEEP

3072:WA1yYHr8bv7VjbDYCnx1JYEUUl9jFrp/:WAcY8VjbDYYxAhajFr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4348580ee9b83bba6e911d567394633a

Files

4348580ee9b83bba6e911d567394633a
.exe windows:4 windows x86 arch:x86

504386967418e86a4a34433284104637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord593
ord594
ord598
ord525
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord319
ProcCallEngine
ord535
ord648
ord576
ord100
ord320
ord321
ord616
ord617

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ