5aa95f7ee1277b7bdee45962f6d380d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aa95f7ee1277b7bdee45962f6d380d0
Size

24KB
MD5

5aa95f7ee1277b7bdee45962f6d380d0
SHA1

d9bb77d175ab8fd97fb66448f47bc4c58f72a44e
SHA256

f80557027cd186cac24158b3f4ae92e6e09e260d0b6bae347a06390b54f08430
SHA512

7dd78e1990ab074b9ac7d06b867a95a7a89b95c29a476fbb076bd3cbb7e08cd633db1b4259863671cdea9815e58d7a99dc57f8df4d8f2c24d68a8e7b8514e7a4
SSDEEP

192:JAHtlzypp7sCITE96czVhLPqUZ5p8vlR8sfQ6zeFmtT9zt8h+cE:qHQpwCIA6cpVJHS5fQ6zeFmd9uc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa95f7ee1277b7bdee45962f6d380d0

Files

5aa95f7ee1277b7bdee45962f6d380d0
.exe windows:4 windows x86 arch:x86

ac316aec878f98788a0d226e49d9aea8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60.dll

MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord578
ord100
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ