4dfa3d51f7d578e2ac749148eac8c7fc | Triage

Sharing

General

Target

4dfa3d51f7d578e2ac749148eac8c7fc
Size

24KB
MD5

4dfa3d51f7d578e2ac749148eac8c7fc
SHA1

dd87b03686a6dc66b8b367bd36a88e7c10832c51
SHA256

4bccdb84b0afca80ec3e234aa1af360fb136400cdd966d3edaddc4aa34954430
SHA512

d1fbdbfad1791770fa47264998cfebb60d6c3f90c5c572fb8476dc0267d3610c379f7e262ae3c670c49b1901f71bd508e64875d927843a506da8474ee41a1a6f
SSDEEP

192:fQuExdW+kcIG0ByAJ1JFpOf11y2zdo5TIFV2tdwoT9WoA97GUbuuDyvbIu44FUTN:IJdDICUatHd07iSUF97L5yTE4nk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dfa3d51f7d578e2ac749148eac8c7fc

Files

4dfa3d51f7d578e2ac749148eac8c7fc
.exe windows:4 windows x86 arch:x86

38571c91b3acc57064f654e66b67c73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ