4c831b7f6f4e2c4d83fcb22fd5383a70 | Triage

Sharing

General

Target

4c831b7f6f4e2c4d83fcb22fd5383a70
Size

138KB
MD5

4c831b7f6f4e2c4d83fcb22fd5383a70
SHA1

98ddcf89af8a420baf2033bac73568357d57fa8e
SHA256

77e06eedd3ccc86cee9268b324f9c3e9bae47ad163e1a21cae06157fdfe391ac
SHA512

842fa140eef61ea53afdddbe815ccccae4e6d4457acc1a142bdd5bdfde02ee1122e4cda73587408a1958ab6d76bc93e716351a7779ad1d47feb379602fffc49d
SSDEEP

1536:kWoA9cWQa+NWAKxFN1Gt5KBXYgNX6BanHe4merlJlQlkUxkzTQRmHBv1yG3iEoWc:lBJvn+4m69QlkUxuTQRmHh1yG3kTckX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c831b7f6f4e2c4d83fcb22fd5383a70

Files

4c831b7f6f4e2c4d83fcb22fd5383a70
.exe windows:4 windows x86 arch:x86

dee5ba0efaee273afc2da09ae831e45b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord648
ord570
ord681
ord578
ord685
ord100
ord616
ord581

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc_
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�+��
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE