56a1dffd0896335d438645632d4d61e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56a1dffd0896335d438645632d4d61e9
Size

60KB
MD5

56a1dffd0896335d438645632d4d61e9
SHA1

c0d3139021fdc498c16abb4213117144bdfe3bc1
SHA256

34e36a58bbb3ba1e01b0f00ccfec6da36535c639eaff5f55322e91036d23563d
SHA512

644679f85f4b50fb0d51c7c280504d4d752eaf9b7226ee9f51ff07cb7b4e159b0062200f97883e8aa14207e2b3c064b10d88a4f66282fc26a35f9e2a852f6cdf
SSDEEP

768:7rXLZbQQ0Nyuqm0IUF6fWfZV6wpty2fhhhSjNy6RskeOrh:7rbZbQQm1qmzWfZX3ih9e6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56a1dffd0896335d438645632d4d61e9

Files

56a1dffd0896335d438645632d4d61e9
.exe windows:4 windows x86 arch:x86

c3e40ee79ef1eb3517e975ccb28746e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord187
MethCallEngine
ord593
ord595
ord301
ord598
ord520
ord307
ord709
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord717
ProcCallEngine
ord644
ord645
ord538
ord648
ord571
ord572
ord576
ord685
ord100
ord613
ord616
ord617
ord619
ord580

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ