5d68916e8ef8e84a42300aaa2d2dbaf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d68916e8ef8e84a42300aaa2d2dbaf4
Size

48KB
MD5

5d68916e8ef8e84a42300aaa2d2dbaf4
SHA1

1e4742ed4a144d3b075fa726f5743b54f39500eb
SHA256

50df46e91a6c50ed66962280e8f156b9dad932b5338e3ea681cce22823f4b768
SHA512

82dede90ab7136238b2134e80f6b85569eb49102a27f28a0cf0a3c34951c4445da2b8bd4b7418a63ff8685e2d52c9ce6040e76c47ab52346f507cd1beb45d600
SSDEEP

768:fiNUTYjGbOJNONjCVPCEsokl/9++bjJR9ec:ftMKb1ucokl/dMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d68916e8ef8e84a42300aaa2d2dbaf4

Files

5d68916e8ef8e84a42300aaa2d2dbaf4
.exe windows:4 windows x86 arch:x86

2b95def43c645bdec2b2bb4bc3b94fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ