4b58c6ebd10fad5190bbd9109156842f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b58c6ebd10fad5190bbd9109156842f
Size

36KB
MD5

4b58c6ebd10fad5190bbd9109156842f
SHA1

8aa18aec9c78aad1685fc9ddb0f0378d01c1d9a0
SHA256

bcb7b529238a4c1ac915fda19fb9f6ca5ccf8d65afe5b32f0997442ee8c3dad9
SHA512

1f89193d28741a07574f7e5680d17e1173ec262c7f2a35c268d3957ae4ef94246cda930f3ff85ad5c7ea425240986bab0ceeacffb40de8c1392257051ba5e08a
SSDEEP

384:09j5eyNRHWukWEu6bnhrhQViYJlobfmfnL8337UrC:0hgGkuk31rhQVi+fnqUrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b58c6ebd10fad5190bbd9109156842f

Files

4b58c6ebd10fad5190bbd9109156842f
.exe windows:4 windows x86 arch:x86

85729e3e4679b91240c6a142f596baad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord532
ProcCallEngine
ord535
ord537
ord645
ord571
ord685
ord100
ord616
ord617
ord652
ord580

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ