5a7306379d11835bb336a7cc0a67f995 | Triage

Sharing

General

Target

5a7306379d11835bb336a7cc0a67f995
Size

244KB
MD5

5a7306379d11835bb336a7cc0a67f995
SHA1

aca7d500f3aca6bfae738cd95fde7adc8e25115e
SHA256

4c07999bc61bb238c15095c3f15d0cca66154aaae3aa4902daa12456b25473fb
SHA512

f6ad57cf7372ccdd33afa9046a215c5ff784304f14a7bba2d8c537a6847dbd92d80e2c7c29d6d7fd043dd816a341f7b23eea0bb18fca140e439074383c13e9ff
SSDEEP

1536:6MJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wtBUbbqhuN:dX0e1FB/DpKjCLHAtubbbN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a7306379d11835bb336a7cc0a67f995

Files

5a7306379d11835bb336a7cc0a67f995
.exe windows:4 windows x86 arch:x86

ec0d65f21e1cecaca83cfe02d6b84318

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ