47b16714b8d9415b31c912e630b82d71fdefe4748403da81db6577485caf5d84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47b16714b8d9415b31c912e630b82d71fdefe4748403da81db6577485caf5d84
Size

16KB
MD5

745e497dc5e3c69fa3a775df487f7272
SHA1

fe7206fad2d7b08602bde24840bb5522f189a728
SHA256

47b16714b8d9415b31c912e630b82d71fdefe4748403da81db6577485caf5d84
SHA512

b66fc41b59a3de3143d308fadb9d4dca75389d87ce61a20e084ce1d23be0925c27faefc4befca6f6b6651e125e5f392afb3cb9599d621d50e39b8854d80c05e1
SSDEEP

192:TH9NMhDjsohXgejGnvLVie/JODqrEzMh:jKjqIe/wzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47b16714b8d9415b31c912e630b82d71fdefe4748403da81db6577485caf5d84

Files

47b16714b8d9415b31c912e630b82d71fdefe4748403da81db6577485caf5d84
.exe windows:4 windows x86 arch:x86

656bdeb463798308ea414e7f65effab2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord595
ord520
EVENT_SINK_AddRef
DllFunctionCall
ord567
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord685
ord100
ord619

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ