5a383873ed0a4479a1d14c777c70d669 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a383873ed0a4479a1d14c777c70d669
Size

22KB
MD5

5a383873ed0a4479a1d14c777c70d669
SHA1

f03673f33ed255d620bf8d537e4583bb6b3b7800
SHA256

52b3402e438911acf2ae2dfab5f225c401ac63c8b0f8ec5bc2186668bdc77614
SHA512

b7be7c71c8515ed3799c7f36df6b9b5ac8cef6ceb1981d8420903652ad5396f9e4d440fd6c45ccd5c765ef618fc891ea37fc98eec49455cb904f043732d2fc3d
SSDEEP

384:jmuSPLpDoyoHLjvthMN9nRALVFyLmBw2z/A:jmu2lDoyy/gWyx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a383873ed0a4479a1d14c777c70d669

Files

5a383873ed0a4479a1d14c777c70d669
.exe windows:4 windows x86 arch:x86

fc6e9eef70c5bdc2b78493f3bf6a933b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord585
ord586
ord693
ord587
MethCallEngine
ord513
ord515
ord516
ord520
ord522
ord633
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord685
ord100
ord614
ord616
ord617
ord619

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 912KB - Virtual size: 909KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ