4ee897a14cb452455b778055fca8d0ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ee897a14cb452455b778055fca8d0ce
Size

452KB
MD5

4ee897a14cb452455b778055fca8d0ce
SHA1

87235ec970a18365fd4f8f9482cd92abe85e50da
SHA256

8f70a2760b0e8849a6f304d1c6c6b3351b5dc7c1b6d0352596da81667f57c58d
SHA512

9232181e633329d5ffa3ad8229a19c7814ec3e1d83b29e9a0a28c87b0bedb7b6c7f2143167a014690a98baeaaec2bb11332c4e789af8ee4028e40f5d253e787b
SSDEEP

12288:Xa9SewEnqn0GsPvq8Yd96wLPn2FJ1o4CyYQUoegjv:XFeDQs68+961dhb7egjv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ee897a14cb452455b778055fca8d0ce

Files

4ee897a14cb452455b778055fca8d0ce
.exe windows:4 windows x86 arch:x86

fcf42e1a14110d3a3ae762809131a6ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
BASIC_CLASS_AddRef

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 420KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ