559f36a5810b81260b8509829d1d3673 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

559f36a5810b81260b8509829d1d3673
Size

76KB
MD5

559f36a5810b81260b8509829d1d3673
SHA1

d60bba6c91a3691b44977d54b79592e394a35752
SHA256

9fe4037793b1a72e0bed024602598a3d43490c972ff772d5417f62ed3a6e770f
SHA512

5e552590420eb75b0ea5dca7987d2c9adf9cdd3991d5e6eb1d304c9d5e7864e725b625ba5b98ff711b751fa73a7008fd37744154ed11c7ccbb07c23aee47057a
SSDEEP

768:/4iMXDkdGm5mxM7KtR9pg/y/11uuF0gdFxD11nkxKFnGo:/lGmWM7C3Ym+uF0gdFxD11nkxInGo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
559f36a5810b81260b8509829d1d3673

Files

559f36a5810b81260b8509829d1d3673
.exe windows:4 windows x86 arch:x86

61e2b2f76b22f62acfa660c92999a223

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord586
MethCallEngine
ord517
ord518
ord593
ord594
ord520
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord571
ord573
ord576
ord685
ord578
ord100
ord687
ord616
ord618
ord580

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ