4a34a8f38af8d2fad5ede6881263d077 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a34a8f38af8d2fad5ede6881263d077
Size

12KB
MD5

4a34a8f38af8d2fad5ede6881263d077
SHA1

2de3d2f20fbc2db8f7410609b4b6e34dd5f3dd36
SHA256

90239dd5145815a005145eb7566eda4ad6f555b8e70ab7389a844b0d62ea2941
SHA512

b92905ef21e0d42168d917a612275401d83fa7debe6c197f020a8ddd9d0b3dd35e87dcbd1ce50951a76bbfc523f0047d5c48f172432cc1bd03c4ebde68ab02a5
SSDEEP

96:jjG70fTS1b5FSXZsHyV55RQFMYJdSHW/Ew2:m702b5Fc/j6W+Ew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a34a8f38af8d2fad5ede6881263d077

Files

4a34a8f38af8d2fad5ede6881263d077
.exe windows:4 windows x86 arch:x86

dd1352569303e3b273bd3993f9bd7d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ