ab5043d38acd4cb0d8fe726502624a45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab5043d38acd4cb0d8fe726502624a45
Size

20KB
MD5

ab5043d38acd4cb0d8fe726502624a45
SHA1

e3f4233339f0222ec98a07cf95d19920cf55f839
SHA256

098e0ee64df263afe4d77b9fb6113ab1b8a5f8534225b22470a0b1c4bb467ab8
SHA512

6e031224682e98de91dbcb576a23023c2dcc525a2903219e6c15cd75f1074992427783e119a3d46e2e913a3dd0b617dc43d4355b25dd081b516ed48a75aa24d5
SSDEEP

192:ullDg76VXV1dNuqzL7slZZiv2pf18SVSV+FAhTK6g77/QJAdN+Di9g14kZXjB/SQ:Gy7SF1nOZZivoP+K6gHQ6PkZzBK4pf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab5043d38acd4cb0d8fe726502624a45

Files

ab5043d38acd4cb0d8fe726502624a45
.exe windows:4 windows x86 arch:x86

198dd50f1ae52b8da42f809d1b15f5ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord621
ord516
ord518
ord666
ord595
ord598
ord709
ord631
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord606
ord607
ProcCallEngine
ord535
ord537
ord648
ord570
ord576
ord685
ord100
ord689
ord616
ord617
ord619
ord580

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ