591d80c99ed29822f27abc284a2ed8da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

591d80c99ed29822f27abc284a2ed8da
Size

80KB
MD5

591d80c99ed29822f27abc284a2ed8da
SHA1

53c6ec9bdd19e9fec692bdb5fe871c8695f7bb0d
SHA256

e3e5885b56daadb489f9586a1396d11268d03241ca80c485be464e97da65e88f
SHA512

6b6b07013510506e493acad5dd2de02ce3f281badecf4e7736c78f286b04e7797a1baf768e3c796da217b9dd8c2eb2a40f780e37ad8b7e8ec27af2a77a9d5612
SSDEEP

768:YMY8qi9jz9a9c9plasFS5ir0+XtvM00FgypcrEQPYggf+x:Yqn77laHiw+XtvMrFfcrEQPif+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
591d80c99ed29822f27abc284a2ed8da

Files

591d80c99ed29822f27abc284a2ed8da
.exe windows:4 windows x86 arch:x86

318775024d97a1669fbfa898a5a07ab2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord594
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord570
ord571
ord573
ord681
ord685
ord100
ord689
ord616
ord617
ord650
ord581

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ