5d1289d96223266647f922e7d0241858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d1289d96223266647f922e7d0241858
Size

152KB
MD5

5d1289d96223266647f922e7d0241858
SHA1

a305450d1f4c08de6c1da17960b0a29e8ecd9b89
SHA256

e121086a488c26ce98eec36efac2b7db348585964d671074df30fe170985c644
SHA512

7f1335ed27929c00ee18fca4c07a6c6aa0a2f82734f9c31f643290bdf00b40654fc85f507b3d01150f7723de7ff66e5e6701c9375b50cc43fcb60ac3459dc8da
SSDEEP

1536:7GBsWSAH1TQWZS+fNqr8aXNAezV45IhEC2WgEGBc:41SQ1TZZS+48aXNZzVUIhOEuc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d1289d96223266647f922e7d0241858

Files

5d1289d96223266647f922e7d0241858
.exe windows:4 windows x86 arch:x86

c35fcfbe8b6cb8faa304e106dad87932

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord626
ord628
ord666
ord598
ord631
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord606
ProcCallEngine
ord644
ord572
ord100
ord617

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ