597e32c76cb2e155e36eb28e331e0494 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

597e32c76cb2e155e36eb28e331e0494
Size

14KB
MD5

597e32c76cb2e155e36eb28e331e0494
SHA1

d5c09cbb4d2d6eb81e4f0a45a3637d6ed06fb931
SHA256

72b1e69601673629f4fc77312b0d7f639a0b780a4369ebde2e3c4c0cd3a1ab9a
SHA512

204407ddfcc2d8a74542fcff78ca6c742f9749c7138baa22c8d46adf87f5110dbcef700e6f0c55697c403f74cba57f1ca91c5b7be23c2ebb2882a6e0e0461add
SSDEEP

384:NQEAYRWCbnApNuZUQmDb/bxmAKUzCaRTwrC6DM:NQOzntGb/NmAKUR0e6DM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EasyAccount lvl.55/EasyAccount.exe

Files

597e32c76cb2e155e36eb28e331e0494
.rar
EasyAccount lvl.55/Directions.txt
EasyAccount lvl.55/EasyAccount.exe
.exe windows:4 windows x86 arch:x86

5a4c62537343894ae34b0e239010f4ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord645
ord573
ord578
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
EasyAccount lvl.55/Leeme (Español) xD.txt
EasyAccount lvl.55/oldplayerstats.txt
EasyAccount lvl.55/playerstat.txt
EasyAccount lvl.55/playerstats.txt