0106d54fbc52ef61b99537978b7dbada | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0106d54fbc52ef61b99537978b7dbada
Size

60KB
MD5

0106d54fbc52ef61b99537978b7dbada
SHA1

eb1900a85d11e7b2ecf6351be6a41de4b0b5aa07
SHA256

3ebec17bd081c1dba5066cb288103435088444450153f4b78d2b4e9e73d5c8ce
SHA512

a091b39b40854b37d44b15795f9b5db7a0555a1a4ff9c1366e981293dcfa40c829e828d19132a57eb01b37a8a763df65693c4a0162cb03260b83073b801a0362
SSDEEP

768:vQJy2HjrPr/5m/UMLmNoI/LJgKFIktcvFIkCd+D9eaLVNvYn6gQNyspK6D8Lx4jk:v1IThxeVnBvmiINMK9VmZxrUOjD5mD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0106d54fbc52ef61b99537978b7dbada

Files

0106d54fbc52ef61b99537978b7dbada
.exe windows:4 windows x86 arch:x86

979876e1b54a09d7d035622844226ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord584
ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord714
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord614
ord431
ord616
ord617

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ