46bfc9909f578b32aa8dd7259cce848d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46bfc9909f578b32aa8dd7259cce848d
Size

37KB
MD5

46bfc9909f578b32aa8dd7259cce848d
SHA1

8a9a8152238d3147a0de604eff32dfdd15a51f55
SHA256

5035223bc9d2f3ac729562e57e71709cafc12e8873460f93b2f63a53991d2498
SHA512

ecd746435c8eeb93c1eb35ee440ad271f8f7ad7053e1aa05b50873341899a2641dd076d98320e1b431ec4df09be6c73fa502f01eb98a9f6c8f26fa6e574ea376
SSDEEP

384:dnZj4My1cIJF4MmlezG64NCgHcmtlXQiYs1h6wH3UTWKuHOdxyOIRMLA:dZgJF4Mm2G0gjPArWa/IyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46bfc9909f578b32aa8dd7259cce848d

Files

46bfc9909f578b32aa8dd7259cce848d
.exe windows:4 windows x86 arch:x86

11066834ccc0b24021370e0d19333194

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ