c53121d35e2c545ea14993220a684e0a | Triage

Sharing

General

Target

c53121d35e2c545ea14993220a684e0a
Size

36KB
MD5

c53121d35e2c545ea14993220a684e0a
SHA1

97df173b542217a3da303c8c8a2b76eede4279fa
SHA256

b29df9582ace3020b6dd5d2a4a618662d0a5a995f161f4abfb75fea427c1fe84
SHA512

8c0250b7da8762ba3070c30deb994a5be7d7f9164e028d461e761b0c0b9b56236bedf46044a3ec9b58850e33a35e165509eef1b9b7096bf8c75a3ae53f149774
SSDEEP

768:pz3tjKRQvV8m9toDAZn2ac3Irymz3tjK:pj1KRQvV8m96DYn2acUymj1K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c53121d35e2c545ea14993220a684e0a

Files

c53121d35e2c545ea14993220a684e0a
.exe windows:4 windows x86 arch:x86

2b33c9eac51b4327b644f455aebd332c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord520
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord685
ord100
ord613
ord617

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ