df48b53be802d9694e97809856daf5c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df48b53be802d9694e97809856daf5c1
Size

16KB
MD5

df48b53be802d9694e97809856daf5c1
SHA1

cca3c133a165def45671992ca359175da33b9fee
SHA256

e9f10fcd1c0d9bd5c77fa19eb40250769830284704e834ce95a5a121b2eeb1d6
SHA512

7896db74723867f1df5abf40ba605aa1b4617ad6395ea78e2f8d40f71b45104f603b2d8356dc090efa638d03fb151d38981c49afc0fcddc04fed7b5965442fdb
SSDEEP

96:zNwXAm4g4RMtGeBZpmVDL3xaFqXJZvArLDMVTR15Ev2:ZwQmGMtGe3pmVDL3xaYzvAroWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df48b53be802d9694e97809856daf5c1

Files

df48b53be802d9694e97809856daf5c1
.exe windows:4 windows x86 arch:x86

adf2972bcf5923b073e636e681892f8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord598
ord631
ord632
ord526
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord645
ord648
ord570
ord578
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ