c4b048d331af9b78e66cd6bd66e2e08e | Triage

Sharing

General

Target

c4b048d331af9b78e66cd6bd66e2e08e
Size

172KB
MD5

c4b048d331af9b78e66cd6bd66e2e08e
SHA1

3020a70a933655db763046e528fc6f84d42b6686
SHA256

dbbbda6dcdc4c947cf0e0fd3cd348f902849e0ea8610a19d1701d1363b822d34
SHA512

7268953f7d37654ce488b8495211015ef9d4cc7ab3fc0581636082fd26a3bd119dd73ceb1c966564b9caec95ca871c4787cd5a3e7ba927d6c0f08bcc04a4916c
SSDEEP

768:UoKLX2IR298tiYYGrNGzzLMOF2v2451u+h:UiI7NGXLMOYv2d+h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4b048d331af9b78e66cd6bd66e2e08e

Files

c4b048d331af9b78e66cd6bd66e2e08e
.exe windows:4 windows x86 arch:x86

59044e949bc3468d2f323f770ab28350

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100

Sections

.text
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ