4675724d65c8678a872b1f0f7f89887d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4675724d65c8678a872b1f0f7f89887d
Size

316KB
MD5

4675724d65c8678a872b1f0f7f89887d
SHA1

d121c8926392c3e98d2ba187b58eff5defc6b7b0
SHA256

59e7f08cfc6d76dbad07f1a77a24e9f9af2bec787b31778a52f160c0a3ea4bf3
SHA512

9fa87c97610c8df45b9e4e9db34114072bf089b0ebaeacc1d0c1d1a65c50a586502a9d3a58ef3cea297680a87a8787ecf3af1405dda7d0640a63f4cd995cbfb1
SSDEEP

6144:mkAeExyuVfjqppYZ6nae+4qzmf9ZAAz7k3YniQoorKUK/Lv26hus83:sVWQ6naejzf94AKUKDvzjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4675724d65c8678a872b1f0f7f89887d

Files

4675724d65c8678a872b1f0f7f89887d
.exe windows:4 windows x86 arch:x86

122cd351d657bb97f57193ab7a7a4439

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ