58818ba509a8e7ff08029c2796458902 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58818ba509a8e7ff08029c2796458902
Size

40KB
MD5

58818ba509a8e7ff08029c2796458902
SHA1

7cf400c49142d49139cfb73cee5b0df1ca463fb8
SHA256

a9bd1f0aff39746e09d0ae9eb32770e15c997dc8f1a91ff8d1de8b2ddd601f77
SHA512

8ae7be552e9db9c0c3006b07104fa1e553a07170fbdb2e82b0134a096dff48a9bbb2fe97c5553feffd00820f2ff87fc05cdb632df2c0456983b70c4c34f412db
SSDEEP

384:eat6dcy+fSQfxuVrVCGk2gmaEXEF/9LHM++yKWWrBRR3RRRBPfR2QjG7smKOknx:eagdlBQZMrMGk2DaEXEN94++g+j2sma

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58818ba509a8e7ff08029c2796458902

Files

58818ba509a8e7ff08029c2796458902
.exe windows:4 windows x86 arch:x86

a90618eee13a2c885cde88591a5354a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ