47049c425ae85a0aaad9b8c9353334dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47049c425ae85a0aaad9b8c9353334dc
Size

48KB
MD5

47049c425ae85a0aaad9b8c9353334dc
SHA1

59573a18f12137132338dc8c3ede918c64300225
SHA256

63bb1c3c41bb2f1ce46bf42fd75f9a7bde2339b7963eea2e6a4add20429603f0
SHA512

6300d7d8721c343d6a03b6d6d136eb3a050f0ab830a9fc0134128ee3d36d25d6131497e497063c6d5580a3775207efd76119395e07da497efa976eb64b13aed2
SSDEEP

768:niNUTYjGbOJNONjCVPCEsokl/9++3jJR9ec:ntMKb1ucokl/NMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47049c425ae85a0aaad9b8c9353334dc

Files

47049c425ae85a0aaad9b8c9353334dc
.exe windows:4 windows x86 arch:x86

2b95def43c645bdec2b2bb4bc3b94fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ