59a4b666d88bc04037f7f6897f307893 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59a4b666d88bc04037f7f6897f307893
Size

156KB
MD5

59a4b666d88bc04037f7f6897f307893
SHA1

1a7cf915ad7a1506e8f802603ff745ac1eae0111
SHA256

5ab4fd8b37c8f1d8768389e41f5a33b0ef5f2e583a810d7fd779e766b3ea8905
SHA512

f9032c037bbd9ef8b94880116dc3d6a0909f3315cfdd8ea24dc22073172a094c47564e379890c4845ab9a7cb11ba3a5ad431c40a70af2baf428f3b93b09135db
SSDEEP

1536:TYcGYl02OnFSKrJiq6H48O6j6/t66366Z6Jz36k6eA66KD6sqG/Oji6FA8HxAH6q:U5D2OnFrS3e50/MZZZZWMkIJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59a4b666d88bc04037f7f6897f307893

Files

59a4b666d88bc04037f7f6897f307893
.exe windows:4 windows x86 arch:x86

2ee038bea026d5e41d1404ac14637f53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord667
ord669
ord595
ord598
ord599
ord520
ord523
ord709
ord631
ord525
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord681
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE