54fd3db2d2956344d7f54f22d65351a4 | Triage

Sharing

General

Target

54fd3db2d2956344d7f54f22d65351a4
Size

36KB
MD5

54fd3db2d2956344d7f54f22d65351a4
SHA1

a2ef6f50fb9572943b107278038b57b51d89d34b
SHA256

cfe3f6912652f11c7858ad3b273fa28f3c7ce4a8543e3c55f6d100bb81b28d7f
SHA512

dab59f77f457d3c3ecd0d2529a2de1cbdedfa8aeb5084fb04ac7257ac1684563a17b407e2f3861de77d49d3cfe5aef1f71dd62b4c07084b9a97f470c8e3da738
SSDEEP

768:029Rs3L21LILeuqnkXglR82uNPgsnnRWW:N9W3L2ZIChkXC82uNI6RWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54fd3db2d2956344d7f54f22d65351a4

Files

54fd3db2d2956344d7f54f22d65351a4
.exe windows:4 windows x86 arch:x86

1bfd2907ffa591a6a1d8b0824872352e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
LoadResource
SizeofResource
LockResource
FindResourceA

msvbvm60

MethCallEngine
ord516
ord666
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ord537
ord644
ord645
ord648
ord573
ord681
ord100
ord619

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ