0544f15e7c03ed21a43b64a12d5ec664 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0544f15e7c03ed21a43b64a12d5ec664
Size

140KB
MD5

0544f15e7c03ed21a43b64a12d5ec664
SHA1

24b2bad0e50570c3be34971546c7dc9e92cec5c8
SHA256

68aba94ee29664feaa1f74d6388ae2573dfc93c1d145a226e46dc18ebba5302c
SHA512

91ce8bdb9d7a994efa05d800570a26a82c33c2c11c5b87b6aca8ad065cac83a82d563f8c88cbe779a06ff68c57f1e0ae97e8756015481d485087f13934983319
SSDEEP

3072:og20zyoCqPOz8R4HALGDp5p1g12fXkqDpeGQA:Y0zyiZRKALzQPkqD0GQA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0544f15e7c03ed21a43b64a12d5ec664

Files

0544f15e7c03ed21a43b64a12d5ec664
.exe windows:4 windows x86 arch:x86

d66af7b4c0b87cf0d4c105a27006e3ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord517
ord518
ord598
ord709
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord648
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ