539f74e8532bf562c5772b92c91e1c3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

539f74e8532bf562c5772b92c91e1c3f
Size

48KB
MD5

539f74e8532bf562c5772b92c91e1c3f
SHA1

2fec15a8ffd6e6acf96f491b6a27ae1107955bda
SHA256

51b4d0d7c134a55e9a5cf1badc4bffa7320771e7adcca6e23d0fc790b0641e8f
SHA512

416a2eaaed4e482c62636cb1d89ede23862c40259f3c6b37f5275ee148fc03ffc0ae6b6928f5a771201dd72f4aecc8f8ea9e2fa7a385dd117ec2fadd21c0ae26
SSDEEP

768:IiNUTYjGbOJNONjCVPCEsokl/9++2jJR9ec:ItMKb1ucokl/MMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
539f74e8532bf562c5772b92c91e1c3f

Files

539f74e8532bf562c5772b92c91e1c3f
.exe windows:4 windows x86 arch:x86

2b95def43c645bdec2b2bb4bc3b94fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ