c4dddfba143b11b6a674c2a48a17d27e | Triage

Sharing

General

Target

c4dddfba143b11b6a674c2a48a17d27e
Size

215KB
MD5

c4dddfba143b11b6a674c2a48a17d27e
SHA1

1b012f91bfe625d63b88825a068aa6a4c714b310
SHA256

7c21bea65fe8de699d0d2989b89488b2640ab2eda8b7dfb1bfeba655a8113712
SHA512

fe739d7a8eeb6e0febb14a030201036492de3f0aa7ab71795b70528e70c24bdc7cf1a939a382446e25e24df4968ca291fee2140aa1c6b5c6c0f85778e01c37ec
SSDEEP

3072:15PDykjCBx2hypK7D6zdX3+P+kdMTvgz38QZy7LbHmDOKkpXCOQOnB81iK/:xowgLbH9rpyO1nBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4dddfba143b11b6a674c2a48a17d27e

Files

c4dddfba143b11b6a674c2a48a17d27e
.exe windows:4 windows x86 arch:x86

825fa7e01003fb8a45b79d0eba2bd344

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord644
ord100

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ