059aeffb95dcc1379adb6893f364f4a6 | Triage

Sharing

General

Target

059aeffb95dcc1379adb6893f364f4a6
Size

28KB
MD5

059aeffb95dcc1379adb6893f364f4a6
SHA1

696fa6fdb65f24f20ecd0e089cdd76c60abe6ed1
SHA256

36f381d86d47929e6fc0ba5f974a3443d50e61e8c8e977562649e646d83f369e
SHA512

9e91456e9d73f6d78d917d63f71ddc3b3686364e05c3fcd5dc37c30ac0d28581b8a54e96aa2d5af27776d885bc4bff01dbb2d73e098ba1e73377a5abda7b1271
SSDEEP

384:BnVdnSB0s3AbmHipVTSpsgvXkQBmy21uE:BVdnSB0s3AyHW51u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
059aeffb95dcc1379adb6893f364f4a6

Files

059aeffb95dcc1379adb6893f364f4a6
.exe windows:4 windows x86 arch:x86

d2784476bc0eeae7499ac342bbe454d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ