55a381d8b85264a903fa6c98c9b611f8 | Triage

Sharing

General

Target

55a381d8b85264a903fa6c98c9b611f8
Size

744KB
MD5

55a381d8b85264a903fa6c98c9b611f8
SHA1

2e971a56f83f11340ab9cba55d2036e7c86cf7e3
SHA256

02c7224e2153ace723956bc3777f271e9cee6e1e66e557ba4d70f92252084870
SHA512

e842db6bc7403e9f99aa62af0362fd8424b48142cdfd8c115dcb7be23987a7e4f6771d8ffe018937a895f9476005e73ed26313d565bdfe7137dfd7c6ca661f60
SSDEEP

6144:oAUgItHEaYx7tM92ZZv/9coxPsm3ip3bvuc3Dfw+GS:pUgIlexY2zv/8loS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55a381d8b85264a903fa6c98c9b611f8

Files

55a381d8b85264a903fa6c98c9b611f8
.exe windows:4 windows x86 arch:x86

d7d8d32f7cdbb9950fd3c2cdaf5c6479

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord598
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord100
ord616
ord581

Sections

.text
Size: 736KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ