01f5230e6f97157fd018e1e5a5b3e391 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01f5230e6f97157fd018e1e5a5b3e391
Size

76KB
MD5

01f5230e6f97157fd018e1e5a5b3e391
SHA1

2e4d46b6dd1e8b9d33a53af206e18e8bdddbca3f
SHA256

3a81cd3efdca8c185d4c4f832326651a57c48d391b962582b0edf11502f5ad66
SHA512

c73e2f23438d69f1d9c60bec7a28437ee65d12c9fd581ead7cfe5007e14bc587b875c9ff49fd2b5cab150390d9864f7d4e8560cab90f4a12dbb36da9b89fbb89
SSDEEP

1536:rSF8aGCowvrb0B0CO0J1dHmitcUZIT91O:S841rAfHLtW1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01f5230e6f97157fd018e1e5a5b3e391

Files

01f5230e6f97157fd018e1e5a5b3e391
.exe windows:4 windows x86 arch:x86

4729938ea1e6c7d0f3ce98b23443169a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord665
ord593
ord594
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord571
ord100
ord689

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ