46c4b0933294992615e4143e2ebe0e17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46c4b0933294992615e4143e2ebe0e17
Size

148KB
MD5

46c4b0933294992615e4143e2ebe0e17
SHA1

a11744d658024f6f82461851e518fbff9e2c68a1
SHA256

8424b4a66106c3e93e21ad238b4b14705043cf08ce1531bf1dae2f84fe250d06
SHA512

688159f5045be73a5df5694dcf29eead94db202d06b67ea5dbc8fdcdb6d97aa092b16fc67953dc30c5d6572636755d563db52dc5be12b36b15f17ead100366ec
SSDEEP

3072:5rH+MBdwcvE2QURFV5mPsIDeJQTiBEhCOS9eUSPPdC:3vlRFJP9efM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46c4b0933294992615e4143e2ebe0e17

Files

46c4b0933294992615e4143e2ebe0e17
.exe windows:4 windows x86 arch:x86

6aeb7fbd3ba2d9ceccef3771bab54384

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord573
ord681
ord685
ord578
ord100
ord579
ord616
ord617
ord619
ord581

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ