4a2272b9ec100c8c45ea851a92ef3b72 | Triage

Sharing

General

Target

4a2272b9ec100c8c45ea851a92ef3b72
Size

92KB
MD5

4a2272b9ec100c8c45ea851a92ef3b72
SHA1

68d7afd4265c65c66c06da75096a79ef34e84f02
SHA256

59241a3c80d71ff28037b166db2fd65e43ed009329475d192a6a2211027e3216
SHA512

d5ef1b67bb85bd441a785869b112a74d962daf9dd754ffba64f8239bb9583713b4aa0bebfc739e444006c021d9c865395bac837d6f1f5e1ce7d46eb7dcd8c8aa
SSDEEP

1536:hmKnOzODlEqdlSwHPn7byljshrVWOgZHyogB:h5noOG47mKhVLB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a2272b9ec100c8c45ea851a92ef3b72

Files

4a2272b9ec100c8c45ea851a92ef3b72
.exe windows:4 windows x86 arch:x86

1ad84a9d6cd476a708a0467aab98f32a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord621
ord516
ord518
ord519
ord667
Zombie_GetTypeInfo
ord592
ord593
ord300
ord594
ord595
ord303
ord304
ord598
ord306
ord520
ord309
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord314
ord606
ord315
ord316
ord608
ord531
ord717
ord319
ProcCallEngine
ord644
ord537
ord570
ord576
ord685
ord100
ord320
ord321
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ