52a2efdef8b9243e9a4ba52561c82304 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52a2efdef8b9243e9a4ba52561c82304
Size

24KB
MD5

52a2efdef8b9243e9a4ba52561c82304
SHA1

71aa4b2fb89025190ee3e092a3d5ebbbd5ccf8fa
SHA256

614030b9a3e473389c0c65a0ba455c01b11b088e531c98ab1ef0c83317bbcd16
SHA512

564f276c702d1e554cb98fc2188ab7610ff61a0dc151bbd22f24b4909aeca13c4b9db69c34da5e3236082f400b99159e9f3b8d51584da6f9a83eb34122fb15dc
SSDEEP

192:uwHT9NIeggklvIPVxYhWoRKjc2nJ4zrQnDBMmN1VPKFVQ/ND:l9Nfggk9SVYZKgQDR1I7Qx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52a2efdef8b9243e9a4ba52561c82304

Files

52a2efdef8b9243e9a4ba52561c82304
.exe windows:4 windows x86 arch:x86

175a6e6aaa92eff98ca2a39057baa73b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord518
ord666
ord595
ord632
ord529
DllFunctionCall
ord563
ord600
ord601
__vbaExceptHandler
ord711
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord570
ord648
ord578
ord100

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ