b5aae5490e0058f8fa85d679546e4962 | Triage

Sharing

General

Target

b5aae5490e0058f8fa85d679546e4962
Size

304KB
MD5

b5aae5490e0058f8fa85d679546e4962
SHA1

d6082e729aadb9758bf2e67de074614cb9b4a50d
SHA256

3be85e1abb26945e5162f3e2b44a83e6222ad5ce958fb4837104a27639f9dd28
SHA512

c68bf6b9ca851f686460e0776cc876273da5bf931faa86524c8fdacc744d1fc33a5dbaf6bb070c9d99d761a5189b17be71ba8b3ddc97a8baf5d19f7ee717077d
SSDEEP

6144:RHn+WV2c1bhtGg2+KO0/3OeCNtHrrPwTmWvVxD4WCG2ypvDnXUA6v085dyGSKpJ9:bHG6JuzmSKLPY/ebArFrCCCCCCCCCCCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5aae5490e0058f8fa85d679546e4962

Files

b5aae5490e0058f8fa85d679546e4962
.exe windows:4 windows x86 arch:x86

a19690325ea49d9fcb08eb847ac042e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord581

Sections

.text
Size: 296KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ