05e44a2213fab5e8db49f5f9ddf56164 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05e44a2213fab5e8db49f5f9ddf56164
Size

128KB
MD5

05e44a2213fab5e8db49f5f9ddf56164
SHA1

c313ab59111f4aa694bfee5f47569d5a137a6e73
SHA256

bbdd6ead53b86767f732ba522e8fe28e47e7092aad74a56d843ca742455d5722
SHA512

1c6454ce2936e08dce0aad38f90e97f1fcde84167d7770bad55a74050723d073fc6125751cea80d4779576c97719844d682bad4e034a79cb4dcdbeadd2af909b
SSDEEP

3072:qTUp3jEdH5MMXqVFniU6ceRqFs5KdzJ9VWgYTP31Sv1:fdy2MXsv6ceRV5KdzUgKFE1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e44a2213fab5e8db49f5f9ddf56164

Files

05e44a2213fab5e8db49f5f9ddf56164
.exe windows:4 windows x86 arch:x86

d0f8959e375bef0e83c1364f496839aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord570
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE