4dfc0c4333b440bd79d06804221a06d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dfc0c4333b440bd79d06804221a06d4
Size

97KB
MD5

4dfc0c4333b440bd79d06804221a06d4
SHA1

9df11fab07dfaf0dd244aaf6f242d47a48caeee3
SHA256

39edc1caab81978a5397e942c02a09a720a6ceb8732300d5ec49cf9e250a1d2e
SHA512

246ca0466c0893313a83c3b26ee2bd9ec1977fd508262d47621d2dc9390c1ae6e3cc0023b2ba368e917e97abfbb9c1c876d42c8e2410778f098b69e0c53298ee
SSDEEP

1536:g5zsDNdr46AqK/b7xMdIi8stfIEtJxPKWgd8kNycHW9:I67K/b1Qf86xPk8kscHW9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dfc0c4333b440bd79d06804221a06d4

Files

4dfc0c4333b440bd79d06804221a06d4
.exe windows:4 windows x86 arch:x86

c9117326ae9a472c270c15b795431047

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ