4f262e8e7e0be2b9bd59c5dee3c7bf6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f262e8e7e0be2b9bd59c5dee3c7bf6d
Size

48KB
MD5

4f262e8e7e0be2b9bd59c5dee3c7bf6d
SHA1

de8f85378306a3a10cffdd4e8350e0efe7dee99b
SHA256

e92be5e9492c77976ccd3db76bf127398a3f424c00e71345b244e5e9fb968eb9
SHA512

901f7e24b092f4766dcf05a2f67b38404b0bc1b23387ba75684fa535fb4d16d99df227e70908ef32e0eb205668ba1239e9b4e37273d11b849c8c07c665321931
SSDEEP

768:yRoMh1ZlRpQMd/ixuAeTmqGDNn8ffjDSlyjk0Yvqzo3FV45/xu:yTrGMlIMGh8rkq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f262e8e7e0be2b9bd59c5dee3c7bf6d

Files

4f262e8e7e0be2b9bd59c5dee3c7bf6d
.exe windows:4 windows x86 arch:x86

51fc520264568a9e6e33013956d35dcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord535
ord644
ord573
ord685
ord100
ord616
ord617
ord619
ord650
ord546
ord581

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ