53c6caba28410632f06298dffaf249d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53c6caba28410632f06298dffaf249d3
Size

86KB
MD5

53c6caba28410632f06298dffaf249d3
SHA1

72ce4a427cda947f77014925a51fc5252c97f77b
SHA256

e81694abf1477310c15fe2f47576bc6322edb934e7a73d4e93968fb81ad0a065
SHA512

ba9d4d54d532d877143087a12134f52551e646bfdee75f4ceaa04cfeffd569e52ca926a22a7183c98f959d197ae110a667324492c200316414c90dac72ac6e71
SSDEEP

768:ihSeCKQ3B3ra4LI2t/snWD73X3o8s4nNP9ZiyrJ:ihSvacI2t/snWDXsuPLiy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53c6caba28410632f06298dffaf249d3

Files

53c6caba28410632f06298dffaf249d3
.exe windows:4 windows x86 arch:x86

981d0d1e10b6005d4a19079bc23b19e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord573
ord681
ord685
ord100
ord616
ord618

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ