5816dc32a45e00f42da2d522ea3f57e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5816dc32a45e00f42da2d522ea3f57e2
Size

456KB
MD5

5816dc32a45e00f42da2d522ea3f57e2
SHA1

0fe83b3aacee3a7c05f0e633d3319459e5493c95
SHA256

f58fd40d16edfdc94fdcd6722b2473b9713a91519f2f15821c9707a7e20c3d36
SHA512

f9775de6077d7d1ce088f1abed6d0589ef0438ae7e40d437beeb2faef4f3eef6a8b8627b81f3789048b5b09e3f9de02e452513776c600d2ad55732158805240f
SSDEEP

12288:tBrrsDgAmV+WiQgmxwMxdVkCvmgkAuPKc4jrTheso:t5snmEWc0xdVkCvmgsPEh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5816dc32a45e00f42da2d522ea3f57e2

Files

5816dc32a45e00f42da2d522ea3f57e2
.exe windows:4 windows x86 arch:x86

2d627fb3ddda301a0be4772146c85a1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
MethCallEngine
ord516
ord629
ord666
ord591
ord669
ord595
ord596
ord705
ord521
EVENT_SINK_AddRef
ord527
ord564
ord568
ord569
ord677
ord678
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord606
ord713
ord536
ord682
ord684
ord100
ord614
ord616
ord541
ord543
ord652
ord580

Sections

.text
Size: 436KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ