c31b7139d8d4d59dcca0a09414b49868 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c31b7139d8d4d59dcca0a09414b49868
Size

200KB
MD5

c31b7139d8d4d59dcca0a09414b49868
SHA1

4c212e83e0b9df7828c7c666f89fd86d8ef56538
SHA256

4370906704761c61c70cba03257c1922c25cfe666d9e6f99acf446980bc4a8a7
SHA512

d692ed595e843d7915b423e02b2545eb818013ee9310d138c00f1350ed37f6d196705c0ddd1f48296f5fdbbf23c973a3de1d68029aa8a69c4db3b8907972e1a9
SSDEEP

3072:WQuC2iBjC/aFVjMH9XlYceC0hBfI4gDNTO80i2PAsMe:znVsQjMH96cenBfI4CNq3nPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c31b7139d8d4d59dcca0a09414b49868

Files

c31b7139d8d4d59dcca0a09414b49868
.exe windows:4 windows x86 arch:x86

b95498d5c6edd881bc1e564a92bc5e2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaNextEachAry

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE