b4097a990fe34d6a2395cbcba556167135de48cad28245d90aca700457721ca5 | Triage

Sharing

General

Target

b4097a990fe34d6a2395cbcba556167135de48cad28245d90aca700457721ca5
Size

88KB
MD5

fce5c8cba6853dd979bb0a9270e7645e
SHA1

47777519c70b47643c14b7eaa4231ec9d25b2578
SHA256

b4097a990fe34d6a2395cbcba556167135de48cad28245d90aca700457721ca5
SHA512

aa676dfb95d4d384ed079b74ef53e157c2edf0c30b65b1f6d58b06736c17bb69fd9e1972993297b88551d4f15f802fbf51bade3b7564d7b256ae1c3eaa0715b9
SSDEEP

1536:sxmj9IQ/JDHKa5LJW6/Z2NZQKvdmNmS/:4mRI8DHKuFOJvdN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4097a990fe34d6a2395cbcba556167135de48cad28245d90aca700457721ca5

Files

b4097a990fe34d6a2395cbcba556167135de48cad28245d90aca700457721ca5
.exe windows:4 windows x86 arch:x86

7c1fe1a3c791fbf804bf7c415d5d17fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord187
ord587
ord516
ord517
ord518
ord519
ord552
ord660
ord664
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord681
ord577
ord578
ord100
ord579
ord615
ord616
ord617
ord618
ord619
ord541
ord652

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE