5845c6aa62f9cc1f38e30b2405c199be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5845c6aa62f9cc1f38e30b2405c199be
Size

20KB
MD5

5845c6aa62f9cc1f38e30b2405c199be
SHA1

a6b3c7cd15bdd9e2981f04aa63d450355f72e910
SHA256

f1486ab818a3a10af1759f764ba5c8ee84b5cad61c2c3e33796624baeb70d2af
SHA512

9bfddf50caa040adfbc919b89510381596ac3ebea186497b2ec456e28145e76ec62254e37c8ce810bc143388d3caf34a8f3579b18069a3e479e68ec5e5145d7d
SSDEEP

192:tMt7es7ciwBGtiRW40dg4BUAf+mJU6VbNOJW8hu:acXi3wWlK4BUO/U4bQk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5845c6aa62f9cc1f38e30b2405c199be

Files

5845c6aa62f9cc1f38e30b2405c199be
.exe windows:4 windows x86 arch:x86

f5d5ca1cb9cc8a671515dc34f3592e16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ