56bf666531de631e2889dc78365b2ddb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56bf666531de631e2889dc78365b2ddb
Size

88KB
MD5

56bf666531de631e2889dc78365b2ddb
SHA1

89640f8185eb29bab48cc147edc179dd4302a076
SHA256

8aed0b6ceb26efce61fa3f49d85e2485e7cdfce3fb4d1921d3ef6f0efeca76dc
SHA512

230a6ce7ae1bc622147f555f5a9eddff7166899fbb2f9e70e70cffbfb93c5cdb6e7db075927edea6f361052866c8956f1e0602662b4e3ad8bdcb03ddeb1b287b
SSDEEP

1536:6cQ80RGoiD5o/neShdt5tgA9GhFD4p39OYiclj8LApmfUtEmxNSPo:kbiD5gnV9bT9iFMpxtj8Cm7mXSPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56bf666531de631e2889dc78365b2ddb

Files

56bf666531de631e2889dc78365b2ddb
.exe windows:4 windows x86 arch:x86

ea69993f4d6cff08e500e1cb9d5b1916

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord595
ord522
ord631
ord632
ord526
ord561
DllFunctionCall
ord563
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord681
ord100
ord617
ord619

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ