c4c717cf99aff48832cecaf67a52b592 | Triage

Sharing

General

Target

c4c717cf99aff48832cecaf67a52b592
Size

757KB
MD5

c4c717cf99aff48832cecaf67a52b592
SHA1

3e949b6fb9c6d67fb9dbec0ae13de1cd8291462b
SHA256

b8ccdce24de3bf276a73ac3a23c23668224735f1e0af0d280868efc8fdbc51a6
SHA512

f9f897b1df7c5b5514a194b078cd0e0e56af325cbf69aeb0722a02cacf03779aa031e08f7f87dbc7406e0f3094beae12ac78463c299a9062933814c1ca58e98c
SSDEEP

12288:gDBqmbrCFtTZk+rgePAmdfzQ1FgflGIGTJ36k6UpkJh6H9LCqPJmRyEAbX8DzX0/:CBpWFtTi+1PAqzQ1FuGBTphW0/r8P0Tj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4c717cf99aff48832cecaf67a52b592

Files

c4c717cf99aff48832cecaf67a52b592
.exe windows:4 windows x86 arch:x86

119a7cac2d2a375679b229008a61e169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord595
ord631
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord578
ord100

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ