54bd6282da4fadd041e1d08dd33ba633 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54bd6282da4fadd041e1d08dd33ba633
Size

28KB
MD5

54bd6282da4fadd041e1d08dd33ba633
SHA1

bd552d3195a07fb478da9d1ea6ef6130de242f59
SHA256

7e43887c417390416847c00e2d19e95c12662a0a1966f56e3892f480b6f4e759
SHA512

1fd6f52c82838e4d1c10d7c5cf0e33fe03a02efb6e3f7db9e69aaddd1df101ff8cca9c592f3a1d86d9e5dbbff5ee2c8e636716d0db73eccb51d4b1b39391011d
SSDEEP

384:4rWqS72ZeSD8zC55Inaz56u5MzHq57y4M0G:4rBIKeY8z7az1awjy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54bd6282da4fadd041e1d08dd33ba633

Files

54bd6282da4fadd041e1d08dd33ba633
.exe windows:4 windows x86 arch:x86

a410292dbf34624942d6a5ec810727cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.Crypto
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Suite
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Org
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ