57354fb3c45be8099efb9b7f39bd7359 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57354fb3c45be8099efb9b7f39bd7359
Size

76KB
MD5

57354fb3c45be8099efb9b7f39bd7359
SHA1

45b61f2c0951a505b7b8b0496aef92c94d8a7019
SHA256

e6536fb56db3769d76a8444c26dc705eea60652689b8d7e666ddb9d4c1e79a86
SHA512

bb258405be2d59d725ab75f1d52b96e5a9690e77a261edf2ee840f65981c87663e3046b149832900bbe978f7305b3d7f05bcfacfb2a85ba086913723ef953799
SSDEEP

768:jA6B6xyqopMPAO6ChO2UHPQbzdFOu8PgRLMdfEAKZAUbz/oCEoKfnJR0j9nw:jA6BEyqk8+CZOzPjtjY/VEoqJR0jNw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57354fb3c45be8099efb9b7f39bd7359

Files

57354fb3c45be8099efb9b7f39bd7359
.exe windows:4 windows x86 arch:x86

a4ad7d5b005c95b6d3f5dd8874a9648e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord598
ord709
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord576
ord100
ord616
ord580

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE