45bfce465731532a556d2e51ddb302ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45bfce465731532a556d2e51ddb302ed
Size

152KB
MD5

45bfce465731532a556d2e51ddb302ed
SHA1

75db0b0ff3a7e1ac11ee3df7db5e6c961547e38b
SHA256

d3a3389694851ea9e8e082d82c27327d28b53d952c62505f5da468b26f950748
SHA512

3e586cde4b3279581509587c10824bd13cd352cfc3d985ddd5aff3ecf2d721a45d4022d40ea65cad703f25a65aaeca359bcd081175d10627562a7b6b14f79563
SSDEEP

3072:DjtJhzvoCO87ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfr:1HNkVsuaRaU6mHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45bfce465731532a556d2e51ddb302ed

Files

45bfce465731532a556d2e51ddb302ed
.exe windows:4 windows x86 arch:x86

4634e613c6b6021b2e957737545e6e4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord667
ord595
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord572
ord573
ord681
ord576
ord685
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ