51b420016968f77d756726edaec59f88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51b420016968f77d756726edaec59f88
Size

52KB
MD5

51b420016968f77d756726edaec59f88
SHA1

7ea3d67f4c0d47b3e2ac74ea0860254c1eeeada0
SHA256

f5075eaea2e7d8d07715d21cc2ed4bc0975950de381e68498c6e1bd8d589389e
SHA512

acc9f82edee7a8e4d50f1d60605526bd069f37c2449201deb384de0e8b9ad5b4288ab7fce70a7ed382d72c25d1b6328ab731befb63f3781680024d0f037d8290
SSDEEP

768:OcZcwfmzzoiOZcwUnkqfR6R+nBOAOcPazxIP8SPuBssqb3vHQjwkqTb:ZmEmfoiOmJJfR6R+BpfCsbojwhb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51b420016968f77d756726edaec59f88

Files

51b420016968f77d756726edaec59f88
.exe windows:4 windows x86 arch:x86

20d7880c7df52394d0a37c2bb7d09755

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ