51d73558db3836a4e6e4043ec95340a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51d73558db3836a4e6e4043ec95340a8
Size

32KB
MD5

51d73558db3836a4e6e4043ec95340a8
SHA1

a329eb830241a494390bf110f7493bbbcd26f5ad
SHA256

e5081b2894d69cd457dcb44ea03b08ab03295b08223e0c754199e4897f2ac857
SHA512

0d84ee5fbae000f807a5479b087004edd985647de5830509e7f14f87becf7ec851152ccfc684007999f6304786d573b824db42bad818738f8a38cd7842af6a46
SSDEEP

384:fW9MIQuBTg9QtStx4wWbm658AnDv+SvclwPpjLgLHeIE0tcflIWKjeF9ys6hZghz:+qKgX9aVUGPpjLgbVtMjKj6ysNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51d73558db3836a4e6e4043ec95340a8

Files

51d73558db3836a4e6e4043ec95340a8
.exe windows:4 windows x86 arch:x86

a53530a1e911869a76585a3c5ea833d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ