1b042a9cd35ea995e806334534575350N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b042a9cd35ea995e806334534575350N.exe
Size

2.3MB
MD5

1b042a9cd35ea995e806334534575350
SHA1

84a6b57677c9cfe220e1a1ef2fb2d7cdcf7fe153
SHA256

fb49241bbf177fd6e21c70340e9581725d79dbcdb5636d2c0752f6091cd874a8
SHA512

20e0695ac1859ebb38aaa8b9842b01515c50eb0dcdcc53dd3e53e045ba56327b5b252f83d1564c2ad6d35383b7644df98e1b7ab9adf413e30f1d1153b59a54e1
SSDEEP

49152:XRz62j4kTVkRrYPIfb/YScUi9WRGkN36KBC6jC/CKpB1pt:13j4E2RroIjQSlRGErUCKFj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b042a9cd35ea995e806334534575350N.exe

Files

1b042a9cd35ea995e806334534575350N.exe
.exe windows:4 windows x86 arch:x86

cd74c16e19de02339ba1d593de4c426e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord594
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord606
ord716
ProcCallEngine
ord537
ord570
ord100
ord617
ord619

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ