5da211dde6156aea04558b024349e7b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5da211dde6156aea04558b024349e7b4
Size

77KB
MD5

5da211dde6156aea04558b024349e7b4
SHA1

30a68804afa34e9b1cac6752e2feaa190edc4e34
SHA256

28b56783916462a4e7c70e51a6ad6d9d88ec908df7a176a1dc5c986afb034a87
SHA512

6825f0db48dd24085b07d89776f466cd94d86a4b6b9c7f01b2c055d576a2fe26819dd46f5a750aca912988141859de8296d05ba7e1f5d9052e4fb1bb51e946b4
SSDEEP

1536:ekeK40T/mx7y9v7Z/Z2V/GSAFRfBhpVoK1:FD40Dmx7y9DZ/Z2hGVkK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5da211dde6156aea04558b024349e7b4

Files

5da211dde6156aea04558b024349e7b4
.exe windows:4 windows x86 arch:x86

11b9aad2295138cfa59d24bbd4f7b476

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord553
ord660
ord669
ord593
ord594
ord595
ord598
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord531
ProcCallEngine
ord535
ord537
ord645
ord573
ord681
ord576
ord577
ord685
ord578
ord100
ord616
ord617
ord619
ord542
ord545
ord546
ord580
ord581

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.raven
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE