45445ae479a8816e2121826fac4e6946 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45445ae479a8816e2121826fac4e6946
Size

228KB
MD5

45445ae479a8816e2121826fac4e6946
SHA1

33ed83e28fa14e5b63ce3f54c8a11a060a3c113b
SHA256

4f11675297d58cdfbfda673f7408fa126943efd18d34ed5ff8224179d2af0af9
SHA512

a70663ffd5ba4a624810f3133a86272fab224ef581310fddf9d73a81ea80c7e79e1e4c5a31ed7fbd544ca252541989c1f4a201ce4e0804be881de3deda6b93f4
SSDEEP

3072:XaDtHJpu9Hpvaq7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfr:qpJ8KONkVsuaRaU6mHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45445ae479a8816e2121826fac4e6946

Files

45445ae479a8816e2121826fac4e6946
.exe windows:4 windows x86 arch:x86

c002ec23ece7f26249deb897b9b96f08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord552
ord598
ord706
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord530
ord716
ord533
ProcCallEngine
ord537
ord645
ord647
ord571
ord576
ord578
ord100
ord579
ord610
ord613
ord617
ord619
ord580

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ