4f087836202cbee28b9c6f06f42d6779 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f087836202cbee28b9c6f06f42d6779
Size

876KB
MD5

4f087836202cbee28b9c6f06f42d6779
SHA1

9bfe218fea154295d9f99d27880300b08e60c471
SHA256

e10c1dcd2914cf7b7a583861d28324d4c980d8753b7298f5a4b12153dd83f961
SHA512

c459b6188d8291a9f58f3fdfd87cf55ce4b0d10acadc08a4ef6f76f8a8ba12f71c463043bd4821e2bef46b1b27b2283191d0b5778cf2cb74bdd3d8cdbb84fcec
SSDEEP

1536:SQVW54vU5VZcQy/aLSokMJ76KNMX+Ev2W54vTgzQ:S13TJ07S6KNMX+EOodz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f087836202cbee28b9c6f06f42d6779

Files

4f087836202cbee28b9c6f06f42d6779
.exe windows:4 windows x86 arch:x86

5e9b446af662287109b36abfbfeb116c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord576
ord100
ord617
ord542
ord545
ord546

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nsuxqye
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE