47ca07591e691f61690f7c18c190bb77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47ca07591e691f61690f7c18c190bb77
Size

120KB
MD5

47ca07591e691f61690f7c18c190bb77
SHA1

32d982e1fc885cfe94164dddb10fa723a2ec2bc7
SHA256

590633193aaad647f22c484ce9512028730c04fecb771309a3f8caa86ebb3167
SHA512

83dbd4124fdb9748dc9c398d21ceb618b4300ca989c084f78733f5facb8a9be264338937954093c27e66d264e92af594fac8daebbc0635c87589b33ae70f88cc
SSDEEP

3072:CZoOY+HLgB8JsvHOGKTqUZZ96Gd64nquMJ:Gy4HSZ4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47ca07591e691f61690f7c18c190bb77

Files

47ca07591e691f61690f7c18c190bb77
.exe windows:4 windows x86 arch:x86

4b11289bc200c095a27f641322a2b6b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pstorec

PStoreCreateInstance

msvbvm60

EVENT_SINK_GetIDsOfNames
ord696
ord697
MethCallEngine
EVENT_SINK_Invoke
ord621
ord516
ord517
ord667
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord300
ord595
ord306
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord314
ord606
ord315
ord316
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord538
ord645
ord539
ord648
ord570
ord571
ord572
EVENT_SINK2_AddRef
ord685
ord100
ord616
ord618
ord650
ord580
ord581

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ