50e8a5cd46eca6a2d2911ab391dbfc6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50e8a5cd46eca6a2d2911ab391dbfc6e
Size

124KB
MD5

50e8a5cd46eca6a2d2911ab391dbfc6e
SHA1

79ed2f19d673f7b548b9cdb485eaacf0f3b65b50
SHA256

9a7e9694c4f53bf1d256244720b4a2cfedcebd235d1114747dd555f682c28a25
SHA512

446dd19f8b054102f793f43e3a46eda64bfa4fc9f375e23e17f00bb3a38e239c1d8cae8151bf48616785cf4a75ac50f9e765512bb19b93b66196573b088e463b
SSDEEP

768:CBC0tDTEOVH7/Yy+1ZBFt1xBJ9l+5Q1BIGsf4ao7yKBCcL2xMjB49y5UjYyy0VmE:CFtDTfVH7h01daaCxMjW99jnP7yFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50e8a5cd46eca6a2d2911ab391dbfc6e

Files

50e8a5cd46eca6a2d2911ab391dbfc6e
.exe windows:4 windows x86 arch:x86

198fd6c1d77c3f1268e33382d50c3662

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord599
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord716
ord319
ProcCallEngine
ord537
ord573
ord576
ord685
ord578
ord100
ord320
ord612
ord321
ord613
ord616
ord617
ord618
ord619

Sections

BitArts
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE