046f64991a294194fa17e154af2439ac3fcb8218913062a3282cd0db326b8b7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

046f64991a294194fa17e154af2439ac3fcb8218913062a3282cd0db326b8b7b
Size

308KB
MD5

24d02a5dce17f260d612ef9e63b4f38c
SHA1

20ce160d7d6824ca7f6f8f70ee44a3b402cc4191
SHA256

046f64991a294194fa17e154af2439ac3fcb8218913062a3282cd0db326b8b7b
SHA512

e64dcc968b185fba05fc0156ea809a7b9428a30b74a57a39a0d92e0855247b55868d26c3469facdfed735c1dd66e5b04fb0c93df88bbe38aa3cbbc38125c850f
SSDEEP

3072:P6Lca+56U04mw49Y3r1suFiEIN1suFiEIAO1m1Tbm9mWFKcA:jzFByzFBK1m1dWFKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046f64991a294194fa17e154af2439ac3fcb8218913062a3282cd0db326b8b7b

Files

046f64991a294194fa17e154af2439ac3fcb8218913062a3282cd0db326b8b7b
.exe windows:4 windows x86 arch:x86

49fc08656f9ffcf7a0fc294258ef56bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord597
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ