0e5544b6e08eb9581517e719de481ac5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e5544b6e08eb9581517e719de481ac5
Size

256KB
MD5

0e5544b6e08eb9581517e719de481ac5
SHA1

bbaa89d11fd94026be127c3435e3aac8b94553a0
SHA256

dc900c6056ca770f3810ada6b3ed29bb8ef9c1123f88b7701da98bc901e321b6
SHA512

4a80ef212901a9701a3a166b4b1b4778cc04b2c90efba7551597aa1f25fc4e13222d4cd2b7737f5371a169f0dddfca3024e149463ee707d49f5fe080e14cbffd
SSDEEP

6144:1KJBqtYhbilf9d18KaL4jjiA5wTcjvrCqh4Wb5Uz:1K4YhbilfuLG+mIcjzv4e5U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5544b6e08eb9581517e719de481ac5

Files

0e5544b6e08eb9581517e719de481ac5
.exe windows:4 windows x86 arch:x86

fa76daafe6ecca081d7b16a0d8bb8004

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord669
ord593
ord594
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord531
ord535
ord644
ord645
ord648
ord681
ord578
ord685
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE