5cbeb522e741d7c8f3d9b46c271326cc | Triage

Sharing

General

Target

5cbeb522e741d7c8f3d9b46c271326cc
Size

232KB
MD5

5cbeb522e741d7c8f3d9b46c271326cc
SHA1

09b54a532aa1a7fcaf809a647202ab66096eac80
SHA256

dbec5fe8ec09ad73d4040efbc0318574d91a84fc2fe0d9656deabb7a5409a42d
SHA512

34955cb4b2a54796af6186c40f6c27bf1225b826cd340ef14042aa1e146c59b5b7ddc23d0b2ec0d576bb2cbbf32fa58ee4b1363117db07b7872a66049080f5ea
SSDEEP

768:IfOhsjlTZdr+KGz5BAtpm4eutfrWTVtTZ/BliKG1jiTa9McTfkQ38ZS5p:ItfdS6pm4aTZ5XG1jiTa9McrkQMZSL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cbeb522e741d7c8f3d9b46c271326cc

Files

5cbeb522e741d7c8f3d9b46c271326cc
.exe windows:4 windows x86 arch:x86

41999f591cd5b600e87f7c7288f9191f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord517
ord518
ord593
ord594
ord520
ord631
EVENT_SINK_AddRef
ord527
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord100
ord431
ord617

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE