df485d24988e3c4c7cdb740df1491a48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df485d24988e3c4c7cdb740df1491a48
Size

24KB
MD5

df485d24988e3c4c7cdb740df1491a48
SHA1

cc1ac5951bba86d1d71d03150887134c95fdc1ba
SHA256

ccc3039a33b110726831d0a8d847db5af1d2f8a703ef9a369c113b75b01855e9
SHA512

93372451cac3a4a586ee97dd97f9d68cc013ef528b46b68281546402586610c2a48fa23f98590f24155c4cdd68ab3bcb796424c2ff6fdab8f42e4413ac38c12d
SSDEEP

192:SNnfyEDvotJub6VMNP5n4KGZ0VoTCqLRlv7u3rUSCws6j6sRA9I:SNnroq+V/ZGoeorqwF6+sRAW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df485d24988e3c4c7cdb740df1491a48

Files

df485d24988e3c4c7cdb740df1491a48
.exe windows:4 windows x86 arch:x86

bcd77d33a4e1cee55f2c124644881305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord593
ord598
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ