5a3da1b76dcde2b6277841b0f76325dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a3da1b76dcde2b6277841b0f76325dc
Size

40KB
MD5

5a3da1b76dcde2b6277841b0f76325dc
SHA1

80b390135f18e54f918d0606bb3ea1237ba51474
SHA256

cba681dcada700cb4c1f3e0df946e609b8dc0c842917adcccb9e9453531a6ab9
SHA512

eda0791cad0defdb1710df61daa15ebcc3c9f1505b5e172eb21e1047f4e4672ff389d0be88acc7b17f2a568c6be8d2b0f99de56488374091d41101ec4986ce7e
SSDEEP

384:ds1xKdKw4Y5Q8l5n6HKs5J69XTnFCUEDlE9l0sqUwsLdjOw5O4ypp9iteU7hDx8e:ds1rw95pGKs5kFCUEDa9l0BUtwoKbC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a3da1b76dcde2b6277841b0f76325dc

Files

5a3da1b76dcde2b6277841b0f76325dc
.exe windows:4 windows x86 arch:x86

0c808e38b7487f2dc01589f428888c63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord691
ord585
ord187
ord697
MethCallEngine
ord516
ord519
ord598
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord572
ord100
ord617

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ