5b2145400fe9b11dd1048e4ba2f3bc8f | Triage

Sharing

General

Target

5b2145400fe9b11dd1048e4ba2f3bc8f
Size

208KB
MD5

5b2145400fe9b11dd1048e4ba2f3bc8f
SHA1

f98a1da272c368fb1e0f467ba624064600c23253
SHA256

e0750dc16b5f93ba2f7f05dd6bb51a63ba8500c971cfd60b9d778db1d5a94ac5
SHA512

02ab94ce1ddb34aa3ed4220302171d1b57e45046af19058644fd4e26e9e70d3ef5fc10eeb10fc110f6bac252447cac8b228f16d81828a0c8088fc488bcedb3c0
SSDEEP

3072:w/Y+7IXdeOnVLyCGuVbh9sfp0Rip/j1B/Tuw8v/:67CtJh9sfp0gj1M/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b2145400fe9b11dd1048e4ba2f3bc8f

Files

5b2145400fe9b11dd1048e4ba2f3bc8f
.exe windows:4 windows x86 arch:x86

74f655c841a2ad90aa9834eed25a8075

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord681
ord685
ord100
ord616

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ