4cb3061eae3fcb9d566992221e1a6830[.]zip | Triage

Sharing

General

Target

4cb3061eae3fcb9d566992221e1a6830.zip
Size

21KB
MD5

28973a24d6543d951c83202344c2c83b
SHA1

e39ebdac6d19341afbd68decec3fefa139653526
SHA256

58ae4b1f8e766bb93e0152ac3f59e758256b279e357859847cee6d5a9aa02f52
SHA512

fd39cfaeb2303cb35b58ac9979fc8d31940ba76c592cbf5fcb9a452fcbe5167189c9f492c4e92ba20c41a12b56d234ba5aef8948a8aece5c5c50b5a1b152bfb0
SSDEEP

384:LJbbpXN5H+aDP46aOo8TQCDgD06CcK1GpHoYr0S7QT+V/pBloa+yw/jX5aST4rFG:LxV99LbT6YcOYJ7prIqw/LIST4rMG3cf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7be540210ab6f2be0ada7b5a64dd71759ffa86ce56c478d0e9083eeb02cd6d7c

Files

4cb3061eae3fcb9d566992221e1a6830.zip
.zip

Password: infected
7be540210ab6f2be0ada7b5a64dd71759ffa86ce56c478d0e9083eeb02cd6d7c
.exe windows:4 windows x86 arch:x86

Password: infected

ba0d8ecec1929461d4b682098169f5e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord586
MethCallEngine
ord517
ord518
ord555
ord665
ord593
ord594
ord520
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord648
ord573
ord576
ord577
ord685
ord100
ord687
ord616
ord618
ord580

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ