58e0f50406557cb018021e4235f8f2ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58e0f50406557cb018021e4235f8f2ed
Size

56KB
MD5

58e0f50406557cb018021e4235f8f2ed
SHA1

166d14e75d6800f70dd31dff5e25f6317aadbc11
SHA256

de54e8552b23447836537dbd460f1cddd87d619fa09e8a09dc17340c44a86424
SHA512

7d7c8a09ca6f741495d8f5eb9a0e2e214f7ad739e3389a38c0e9e0a364d0974bfb452ff30cbc0a79e51912f3c4a5ef694b2b9fc072b5c94a575af553bcab9ce4
SSDEEP

768:0AA//rVbaRjhYorwTALFj+gN4iXlUiXtht:0AyAjhY3kUE7t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58e0f50406557cb018021e4235f8f2ed

Files

58e0f50406557cb018021e4235f8f2ed
.exe windows:4 windows x86 arch:x86

56677bc0ff3594acd46ca97387c830ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord669
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord531
ProcCallEngine
ord535
ord537
ord645
ord648
ord570
ord681
ord685
ord100
ord610
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ