4ce956606bfe60e171bc17f58bc153ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ce956606bfe60e171bc17f58bc153ea
Size

24KB
MD5

4ce956606bfe60e171bc17f58bc153ea
SHA1

ce2d19577ba97e02ff9b0a9910a37fa1ee0ab790
SHA256

7de55abe67802010d3559a3c75914b3af2dd832cedc72aad077658e050bb5029
SHA512

172e3018f8d47e59fc4a6b5f42e4954e1dff815507686cb962fba1e0a89c651c4a86959f750eb55d4cea22642cac1033cf9bea2ed4c28f48cff36a28308a3fd9
SSDEEP

384:wRN9AenJgDhlqBivSYJDJBsWhYNGTCsIZ:k9znJgtlqBiqYJi8C7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ce956606bfe60e171bc17f58bc153ea

Files

4ce956606bfe60e171bc17f58bc153ea
.exe windows:4 windows x86 arch:x86

2b321ceb0b63620b7d07ab5f3d19ec47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord558
ord666
ord667
ord595
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ProcCallEngine
ord537
ord570
ord576
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ