5456784df0c60cb5e8317e65b27a724b86a99d048bc0b22cc4c96f8e2780e82f | Triage

Sharing

General

Target

5456784df0c60cb5e8317e65b27a724b86a99d048bc0b22cc4c96f8e2780e82f
Size

8.6MB
MD5

7ad4d73790a03a185a20aaacf53fc111
SHA1

963d544082f1a077b739e3dd5cc814f8aab111ab
SHA256

5456784df0c60cb5e8317e65b27a724b86a99d048bc0b22cc4c96f8e2780e82f
SHA512

9d321f1517f0841f4738a651d005fb81f287bf8a27a025aad09b2271fa7d7e15f8f28aef63bcd8431a8a0b2f658cfc9741d361670cc54174d4c3fa614d07c7ed
SSDEEP

98304:RixzZBvbEV7Vtkp6RF49yd5hsob5vf/DrQsUYHHsPNE2RuCR1XCXjx/b9cvXEn1p:AxzrI6wRF49yd57b9OzVuCRJKjh4g1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5456784df0c60cb5e8317e65b27a724b86a99d048bc0b22cc4c96f8e2780e82f

Files

5456784df0c60cb5e8317e65b27a724b86a99d048bc0b22cc4c96f8e2780e82f
.exe windows x86

7a1a603929400d27f0d5108aefdd25b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord660
ord666
ord595
ord598
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ProcCallEngine
ord535
ord645
ord570
ord573
ord685
ord100
ord617
ord618
ord619
ord652
ord546
ord581

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ