53b3aee1845ba51bbc10e4de18801a8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53b3aee1845ba51bbc10e4de18801a8b
Size

20KB
MD5

53b3aee1845ba51bbc10e4de18801a8b
SHA1

20ce48a3aaea2435874fd9d0c9de3c3959b29a06
SHA256

4f5a1ff535657a8ce3c315e339f01517ee377875398d145593bd74b03ca5b95e
SHA512

eb5381fa136268254969b3bf337e35f160a151f0ef12cba34c7801048c3c3f9b4d871051f7631a2862c1b7e27aaca2919cf47fa36a2ca93c4245feeab7879a4f
SSDEEP

192:Ol7W7AQ+dhs+bHaSzriO7mOud5cWO2/lQ7kpJPADHaziPIADHazixXRf+F8NaOE5:qe74aSiOQ5OlopJPABPIABxXRe8kOE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53b3aee1845ba51bbc10e4de18801a8b

Files

53b3aee1845ba51bbc10e4de18801a8b
.exe windows:4 windows x86 arch:x86

e639dc0ea8a3961b69657c6d3405702c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord570
ord100

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ