4714f730f12dc06daa7cbda8a154481d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4714f730f12dc06daa7cbda8a154481d
Size

13KB
MD5

4714f730f12dc06daa7cbda8a154481d
SHA1

c29f070cfd2460d89e29a8ae3cbed16ec522924c
SHA256

d3a8a42c8f973b171a1fdb0de2a1005f4ff602f5f848fa35ea1c6bb7198375a2
SHA512

eb014bf31fdf2f870bec6c76cd6f17ca8ad10dcbe198b56b250cac4aae7db11530184e4509824a35c467d3e66c52124fe89323ce136e9128d3fe1515361c10c7
SSDEEP

384:WFPEQBAtpmRxc94r8sm9hCMBPhFiarq7VP63:2hZvqAQPLUI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Example/Example.exe

Files

4714f730f12dc06daa7cbda8a154481d
.rar
Example/EXAMPLE.RES
Example/Example.exe
.exe windows:4 windows x86 arch:x86

0471d9f3d9f142373524705d6a5cb951

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Example/Example.vbp
Example/Example.vbw
Example/Form1.frm
Example/Form1.frx
Example/Readme First.txt
Example/Resource File/EXAMPLE.RES
Example/Resource File/example.rc
Example/Resource File/logo.gif
Example/Resource File/make.bat
Example/Resource File/page.htm
.html
Example/下载说明.htm
.html .js polyglot