51bfbe4e037f58444b10fd104beab83e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51bfbe4e037f58444b10fd104beab83e
Size

52KB
MD5

51bfbe4e037f58444b10fd104beab83e
SHA1

32aabbe1e7f246e3fe2021964b9912b532a9311b
SHA256

8a52b161b980b26777036c9f72935db7644b7a8975ee275638af38d492b14eef
SHA512

d8fa500e31e25278397c8532025dbb4a2c7af0a9ef98a86e2f182c5a5cc77487bd77c6f80b1e08d83c11393f588f18d1458b16209f6f7a76a786a842649e03a2
SSDEEP

768:m5qq6ynrN/1aE+1HHBGC3HHDiBh8GwUoRnj58ggbsBYWriGVFhHYYQfqd2fWo:n2aE+BHHHDQwHR9+oxrbfhhQkzo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51bfbe4e037f58444b10fd104beab83e

Files

51bfbe4e037f58444b10fd104beab83e
.exe windows:4 windows x86 arch:x86

1c9ccfedb9df52177f792c92b79204d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord626
ord666
ord598
ord526
DllFunctionCall
ord563
ord670
ord601
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord100
ord616
ord617

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ