c4c11661f8291a0bdd1f53ef191df869 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4c11661f8291a0bdd1f53ef191df869
Size

260KB
MD5

c4c11661f8291a0bdd1f53ef191df869
SHA1

84903d2a2477292bb086a41a30c000cc4ac68c56
SHA256

07d4f0c9ec9bf4f532a6f8ef96dc2c71bec89618c1d07bd64d0a6b3acd542245
SHA512

b1c232c1efab29dc7bf1dca85411fc9a08dab7a0a022ef654735e1a2b2b35445cac94556f6606b6c8fd9e76425bee86b277e42cb1e1aabae82b1e741e5a35320
SSDEEP

3072:BBobMM0yrKaM6lqqbTnsdiuwaSIfMSA+IFr7i:nqIf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4c11661f8291a0bdd1f53ef191df869

Files

c4c11661f8291a0bdd1f53ef191df869
.exe windows:4 windows x86 arch:x86

d775f0159d5704b8d5bd735a53f13b26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord644
ord100

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ