54f0ea288a6706da39b97d1d307838d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54f0ea288a6706da39b97d1d307838d0
Size

286KB
MD5

54f0ea288a6706da39b97d1d307838d0
SHA1

8aacb6ae5f9d58d36d1b40afb12afba4d4a11b3a
SHA256

1ba2eb93a27a30665b1fc5da8ae6779358c4acc7f264fa1c46af1303afb59c29
SHA512

c67d3e6c519634b985e8286103a99ed1cee461f4d6c80350d786294081f2d72990aafe0844c055c1bb6bdd9aeaaac6820832621aa389e8e368d325b3a243ca99
SSDEEP

6144:Hlqqm6tdigf7h/nF5tG0qEzSuWXC20ZCaIis8:Fvm6Lzh/nFS0q6SPCLCaIis8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54f0ea288a6706da39b97d1d307838d0

Files

54f0ea288a6706da39b97d1d307838d0
.exe windows:4 windows x86 arch:x86

ca647a3977795872f36236c40ef017da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ