059b26bbea7d7a1216818873f05b52d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

059b26bbea7d7a1216818873f05b52d2
Size

308KB
MD5

059b26bbea7d7a1216818873f05b52d2
SHA1

15dac75d8eec51a1fcc189b4dcaad36fcdeddc8a
SHA256

28e9517d2d412997c7552bce46559d7215cd70d129159a86c1700c4dc13db3b2
SHA512

d61bce49ccfff682ab1a311841d58ddbcdfb6db37e79028045ebad0897d435fd47a09801e9f5214d7a76c2875f63cec366eaa8ad2b353b367186dc6e137f2bd9
SSDEEP

6144:Bp9Wxu0CvJWczFadLpePUD+7oytSYflaNoRHj:Bp9Wxu0CvJW8FadLpePUD+7oyD8NoRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
059b26bbea7d7a1216818873f05b52d2

Files

059b26bbea7d7a1216818873f05b52d2
.exe windows:4 windows x86 arch:x86

b8e0b84c3843f680b938e863cd030f65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord100
ord581

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ