d47cf8873fdd649d7f2af38790a982cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d47cf8873fdd649d7f2af38790a982cc
Size

679KB
MD5

d47cf8873fdd649d7f2af38790a982cc
SHA1

96a8a5e8e10c23f0ae6b352969d01a57069b2666
SHA256

6c91c2232653ca8015d0c3351bcadb41783625becfac92dc60b9920e92ba367d
SHA512

070d8df79fd84b5bebe56938af4a6534847e6630ccb6dc4054eb86a6f51324493fc224644152a4d03274ff9c4e7debf8630c320859f0ea7301965a31f24a072b
SSDEEP

12288:IPwrkttJqYpdP9eZio7GeCd7Vmdi8q0os6OyYqB:IP9tJnPsZj7Gr2pqFFYqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d47cf8873fdd649d7f2af38790a982cc

Files

d47cf8873fdd649d7f2af38790a982cc
.exe windows:4 windows x86 arch:x86

375c7402f8748b0ff0440c4212cdf8d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

msvbvm60

__vbaVarSub

Sections

pec1
Size: 22KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fhbsqva
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 298KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 298KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE