56f5dbedcd2b64855a33b9e262ad5134 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56f5dbedcd2b64855a33b9e262ad5134
Size

1.0MB
MD5

56f5dbedcd2b64855a33b9e262ad5134
SHA1

4913f12d4ef53e320a5c4d249bdba626338047eb
SHA256

41c18526d4cec91040cdc2f979ece0def3158f5966f4ae2f547d8dec1304111e
SHA512

081d47a8a50f545cce3997066f0727c13d32af852206065b8f35c2afcaf318c4c1939592f9c6f36d498c1e37f299ae26a68c6abbef8eb40d0cb45172b825d8ed
SSDEEP

6144:1tsXlL2C13EAOoyTmS4MaXU8+y6g61ItG0WIHnDOK1fvv00VRL3gVUP8LL+8:1tsBwJt92SAR8LLt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56f5dbedcd2b64855a33b9e262ad5134

Files

56f5dbedcd2b64855a33b9e262ad5134
.exe windows:4 windows x86 arch:x86

5f8db64747dff4c57e0ad4e1ad2142d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ