5c33e42a8b096c0bb74e5bf7ba8ba4f2 | Triage

Sharing

General

Target

5c33e42a8b096c0bb74e5bf7ba8ba4f2
Size

48KB
MD5

5c33e42a8b096c0bb74e5bf7ba8ba4f2
SHA1

05c64e67e84f318d9e7480ae97a9d41ae1dd2bbf
SHA256

1cb434e9416c94a5955c8c417f2df33fa954156b82397ba044723bc271e25725
SHA512

7a571a515037c8ef687f10013da8a5cc95cb2760a7eea6cb87162a218364d3e45203819bf029c7e5b5735a0f3733f6f9786ba809fb9c1f25871870757a9adcd6
SSDEEP

768:bFGTeWIjepk4ySw1RgOgoig80/Ny41nEfQ7jVb/enryu9g2SVURp/19eJQv28:JGTeWIjep5yct/v28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c33e42a8b096c0bb74e5bf7ba8ba4f2

Files

5c33e42a8b096c0bb74e5bf7ba8ba4f2
.exe windows:4 windows x86 arch:x86

0c50f7d79913b54a76cefa0e3a62208d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

MethCallEngine
ord620
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord531
ProcCallEngine
ord535
ord537
ord645
ord648
ord570
ord685
ord100
ord610
ord616
ord617
ord618
ord580

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ