58d6f9a5c3fd302b45c75428654328b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58d6f9a5c3fd302b45c75428654328b5
Size

80KB
MD5

58d6f9a5c3fd302b45c75428654328b5
SHA1

16a3dc79a191d89bf46a59c150a42a54560fa928
SHA256

e99ca4d070d06ed17cd0ca983fc64a1e69db5dfbef958af81745469eb6b993cc
SHA512

9748f95bb624cf498125a900bf8e6b772c2c3867b68abb5d3b98926ea4e227a15b8af925bc6993b97659e4b1befa208172b0a58897b1c389a61631787af80ce0
SSDEEP

1536:q/HOvfMPQYlgIHI/rYoak7g5YsbPusQ/4iFmdfSR:z40kojObWsBiFmy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58d6f9a5c3fd302b45c75428654328b5

Files

58d6f9a5c3fd302b45c75428654328b5
.exe windows:4 windows x86 arch:x86

2e19d27a9007374b81cd1f989697af8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord666
ord593
ord595
ord598
ord520
ord525
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord535
ord537
ord570
ord576
ord100
ord610
ord612
ord616
ord581

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ