59692dfa8ebd068beb2892829aa063c6 | Triage

Sharing

General

Target

59692dfa8ebd068beb2892829aa063c6
Size

512KB
MD5

59692dfa8ebd068beb2892829aa063c6
SHA1

89026cc5c667c95d947485eb79ed3227ebf5d3b6
SHA256

4344c515f5c55c168359835432a8dba7b62a9174bc80f4a3cd4191f816d87c67
SHA512

981dab7fcc19289eeabb0d53e05631bb6f4ed87653306a18332f5bca39bf3f5920bacf012386eba0eb3bb84b13ddeff9814776c7f39bc4fdecaeac387027d7a6
SSDEEP

3072:Skq+aXIDTfy2b+tpT/6WK7FwoDIiItTRG5JhR9tM0aQNroC36V9TmxlCirOCUzvJ:S1xygYZR9O0aElXfyfDTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59692dfa8ebd068beb2892829aa063c6

Files

59692dfa8ebd068beb2892829aa063c6
.exe windows:4 windows x86 arch:x86

3b3d07224cd296a36a8e589a44b17931

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE