de4e278fbb9ff7356e6a8ca8a31494f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de4e278fbb9ff7356e6a8ca8a31494f1
Size

24KB
MD5

de4e278fbb9ff7356e6a8ca8a31494f1
SHA1

a419c813920732b22e3b457673d561a14926155f
SHA256

552876c07d6fdc2f0cefa09347c561f078832ac81f54b6b60a0f5b534c33a1dc
SHA512

7436d78f38f8b0fe33bf5f621980d68442fdbfc4708e431c7dcabbe96b1645f7635fee6c8952ffa5f918b8ed2e6f55eae1411fbfe045080b606dc772c1052616
SSDEEP

192:Fpvf8y3+tnzoNiQ6IdNVy/wuwaQ4WH8s:Pvf8m6IdN0/fOYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4e278fbb9ff7356e6a8ca8a31494f1

Files

de4e278fbb9ff7356e6a8ca8a31494f1
.exe windows:4 windows x86 arch:x86

155fa458f84b9eaf549f1335da8d63ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord716
ord717
ProcCallEngine
ord644
ord685
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ