4da0a2cada8599b85bb7daa9885c8fe1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4da0a2cada8599b85bb7daa9885c8fe1
Size

168KB
MD5

4da0a2cada8599b85bb7daa9885c8fe1
SHA1

439154bf783d568ac251ff69744a1cf9aa35c64a
SHA256

907d8170aff572a9ec0104c2149616ccb7cf64ab0957d254292547ca94702800
SHA512

d6494e8916f1cfd356175250f8102a8a0658cfa07a4e7594a9309b536f69a55fd2f0d4acc7763f0ea6e1a72bcc66acd8532550cdae798df4819ed5da9efde2eb
SSDEEP

3072:cL0lNa7hCutVtrCn+5d8AY61nM8PN9wJJz:cPVdnMK8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4da0a2cada8599b85bb7daa9885c8fe1

Files

4da0a2cada8599b85bb7daa9885c8fe1
.exe windows:4 windows x86 arch:x86

f8fb7573580330e567fc5e587b7e68ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoW

msvbvm60

ord696
ord697
ord698
MethCallEngine
ord516
ord517
ord518
ord519
ord666
ord667
ord593
ord594
ord595
ord598
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord531
ord716
ord717
ProcCallEngine
ord644
ord537
ord576
ord685
ord100
ord616
ord618
ord619
ord580

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ