53213a356be8e8bb60f48fbfc8c33fcdf2f7b4894faa41c7a8f06a07e07e85d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53213a356be8e8bb60f48fbfc8c33fcdf2f7b4894faa41c7a8f06a07e07e85d6
Size

40KB
MD5

7221b6c455bba379b853e2ba79eb65ae
SHA1

781fa3786157a6c8ea83bd12ba1948447438a28b
SHA256

53213a356be8e8bb60f48fbfc8c33fcdf2f7b4894faa41c7a8f06a07e07e85d6
SHA512

2f1352cf5404cee51c35d3361282ad881d179e21d1e863b6e332715b1d898abe566303df620441491e5b1d33b5e837be635353dcb01e3545b0a29f1c7390c867
SSDEEP

768:ohY8wgOSo4Fq1aNhYBikKmoBpkb+fpr3XU6Rt+:ohggOSo4FqhwFmSTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53213a356be8e8bb60f48fbfc8c33fcdf2f7b4894faa41c7a8f06a07e07e85d6

Files

53213a356be8e8bb60f48fbfc8c33fcdf2f7b4894faa41c7a8f06a07e07e85d6
.exe windows x86

1f1c32d9a073e39c01975506f6c40d25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord595
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord645
ord648
ord100
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ