4591c9a860a3c0e93a4fe549d997b9b8[.]exe | Triage

Sharing

General

Target

4591c9a860a3c0e93a4fe549d997b9b8.exe
Size

88KB
MD5

4591c9a860a3c0e93a4fe549d997b9b8
SHA1

557c1679bae8bc38c6d38164d070c7ac89c62c74
SHA256

23feefaa93c45b59227b077b73b14335fb22013fc2e5bde062a13a8bf048c5df
SHA512

89e71d2d3b837f22bad2d9c5f59c09412a1fd1368caf501d8eece662779e2bf68231bebbbf4ec7ce8ed5c6c9399daf15755d0701708619374ca5a5304c847f44
SSDEEP

1536:2pA8EGKEUdUsyvIyWGgXQAKkOBY5GCa4Z6wKVOFJGUzOZoZBYagHx++:1830E9x4EHU4oZ+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4591c9a860a3c0e93a4fe549d997b9b8.exe

Files

4591c9a860a3c0e93a4fe549d997b9b8.exe
.exe windows:4 windows x86 arch:x86

ebb70817973de1846e5125e5bca3b9ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
ord516
ord517
ord518
ord520
ord631
ord709
ord632
ord527
ord528
ord529
DllFunctionCall
ord670
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord647
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ