5b17715106f5df12b2250855555b57e6 | Triage

Sharing

General

Target

5b17715106f5df12b2250855555b57e6
Size

152KB
MD5

5b17715106f5df12b2250855555b57e6
SHA1

37824029ddb5c957c9ca7d6c9c1922b61c976ca6
SHA256

35f4f727ce1388f973a0c3d7fa6fa82ed7aa2d550552a27e23127a039007e510
SHA512

a3f65dfabb4cd5fe045c2db0f9f400cbe944c442847de484a04e18cb55bba4ca6a45bf1023e1a95ddfba2a243d9777c2b9b09dc889fc6e62698bffbf19f76de4
SSDEEP

3072:sfTXUwemmdYhgCrE3hqAZoqRKqJUbyQGCUsPng3LeQi423C:sXeZdYcqAZoqRKqJhCUsPng3Lhi423

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b17715106f5df12b2250855555b57e6

Files

5b17715106f5df12b2250855555b57e6
.exe windows:4 windows x86 arch:x86

f09cde21fca5b4c41ef4fc0e497c5a4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord693
ord588
MethCallEngine
ord621
ord516
ord517
ord518
ord660
ord661
ord665
ord592
ord595
ord702
ord598
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord571
ord681
ord576
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord546
ord581

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ