4fb74871fd12fae925887f427bec6fdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fb74871fd12fae925887f427bec6fdd
Size

48KB
MD5

4fb74871fd12fae925887f427bec6fdd
SHA1

398e55d600a30fa825258f5d4de5beecaa887f18
SHA256

68ecf8d32ca7ffc479e4cbfa9182353b59bd7982a8ce7b0270824e1f5bc82b15
SHA512

908c380bcb72d74bbe6837d6d43c040d491c1390f52ecc84e941d44a744679d8b0b650c23ac4bb6829ba33753998515bbec2eaec5f7decd219066ee5be8c9e16
SSDEEP

384:+NrpgE3+QpHcauuQgc3D/fu9SKFjynBVUc32x8np3LrjbWx7NrpgE3+:+FiEOQ6djgUD/f6SKYnHTLrW7FiEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fb74871fd12fae925887f427bec6fdd

Files

4fb74871fd12fae925887f427bec6fdd
.exe windows:4 windows x86 arch:x86

c4c43d0765d53c5c56dfe86d3eab029f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord518
ord303
ord598
ord309
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ProcCallEngine
ord537
ord645
ord648
ord570
ord571
ord576
ord100
ord616
ord617

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ