b47781f40d4cd2082045b35a9512f34f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b47781f40d4cd2082045b35a9512f34f
Size

593KB
MD5

b47781f40d4cd2082045b35a9512f34f
SHA1

cb8f5dc558b8106833294fe49c411ba3f15a0efa
SHA256

55c7eaefbc24e914f8a3bed1c8f9fdcf50ed4dfc65de1a46838343f50c96292e
SHA512

f03cbd9530f596f24bd4d36845ef001ccb4a294bb26d50f4ddd2cc645df8f1768999209ae271d4a3e8a03f970622ba1653f817bde1f0f6f4a66ac19cf036aa49
SSDEEP

12288:twy+QWApaiFfi8Vy+FqNhvIfEot24V+raMflNXJ0Bg/C7O7l8kTFQPY:zYAwyZVy+yhvaEq24OaGf0EC0ukxb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DocsEncontrados.exe

Files

b47781f40d4cd2082045b35a9512f34f
.zip
DocsEncontrados.exe
.exe windows:4 windows x86 arch:x86

49f27de8e91549bbdafc8945f691fb84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord588
ord696
ord697
ord698
MethCallEngine
ord517
__vbaCopyBytes
ord660
ord666
ord667
ord668
ord592
ord520
ord631
ord525
EVENT_SINK_AddRef
ord527
ord560
ord561
ord187
ord564
ord675
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord530
ord608
ord609
ord717
ord186
ord537
VarPtr
ord648
ord570
ord575
ord578
ord100
ord610
ord617
ord618
ord545
ord548

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 584KB - Virtual size: 583KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ