5cf41707a04b776ace3a612e48dc5456 | Triage

Sharing

General

Target

5cf41707a04b776ace3a612e48dc5456
Size

48KB
MD5

5cf41707a04b776ace3a612e48dc5456
SHA1

a98a41194bf14d41d8e203551a68a4e0e57560c2
SHA256

9a4e296a7bdb2232d7f774f4804bf7a6d91181c546f167b435e2bdae8259eda8
SHA512

879f993fb310508aa04dab535a8cd51e34c0b5464b524f64c292675009d7c5f49cd072b5d8f20943c38a1e16a80f798f93d18aaaf991acbc04ad5a0246735844
SSDEEP

768:adABCcO5EyOVHQjPAb2JrjgfTlOgnIRN/uAjnuZP:KRcO589qRrj6xOdRN/Nu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cf41707a04b776ace3a612e48dc5456

Files

5cf41707a04b776ace3a612e48dc5456
.exe windows:4 windows x86 arch:x86

87e6d7b8534bb4705ea4888ffdbe7955

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord187
ord586
ord588
MethCallEngine
ord516
ord669
ord593
ord594
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ord318
ProcCallEngine
ord535
ord536
ord644
ord537
ord645
ord100
ord689
ord610
ord612
ord613
ord616
ord580
ord581

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ