4d1f70fbb048f397d4ef9d3980f8195bdd45ea07f91ae1e48bb01009cfb90bd7N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d1f70fbb048f397d4ef9d3980f8195bdd45ea07f91ae1e48bb01009cfb90bd7N
Size

64KB
MD5

6218ad6cf539cfa0b20fa5d52c02a5b0
SHA1

94ab08284c3d3eddbd85effee7a3be1808192dea
SHA256

4d1f70fbb048f397d4ef9d3980f8195bdd45ea07f91ae1e48bb01009cfb90bd7
SHA512

a459eb6772b725903dc0b019b5b31a6a4ac0fb1f7a15d56b52c3d756f7c56f212e4f158559d74473622cc5595a1483fde6a5b1a268145551f97452389f0b2349
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrT:KeTqavEjDWpuhT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d1f70fbb048f397d4ef9d3980f8195bdd45ea07f91ae1e48bb01009cfb90bd7N

Files

4d1f70fbb048f397d4ef9d3980f8195bdd45ea07f91ae1e48bb01009cfb90bd7N
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ