5afaa25daf6efc43ed3dd2efc1a5be4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5afaa25daf6efc43ed3dd2efc1a5be4a
Size

93KB
MD5

5afaa25daf6efc43ed3dd2efc1a5be4a
SHA1

f93686156862661530ffbbca65281fbaaf79ece7
SHA256

d3a340557d75a65d3c753248e56e5d22d1737c752ccc2fe60896f2cf5de8d47d
SHA512

d18ed7acd52927d7649e1b0046d4b185912df09f76ba1650f2b2081d2bf25aa1c052bea44047c297a64c0a2baa07879ece1f30afcc53f15633b67397355f7e14
SSDEEP

1536:enusGyEPoUTgOsJ6Ji4ufOGNY5i98TuwFiGXRMUyCxaFzCwnjKtSg:EuPIu3Di98FRMUygaFWwjKtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5afaa25daf6efc43ed3dd2efc1a5be4a

Files

5afaa25daf6efc43ed3dd2efc1a5be4a
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ