c537619fb84c727902b3f72a81102a5a | Triage

Sharing

General

Target

c537619fb84c727902b3f72a81102a5a
Size

484KB
MD5

c537619fb84c727902b3f72a81102a5a
SHA1

c0ae3574a5db69d17ff87935b90346cf27fdd41b
SHA256

294737f9ff002e475c66f425784fc48a214029ee1f408cf2de4e442ddb3f17c1
SHA512

4ed1e72047194a27db2e211ceaa5e3a2e810618660f157ad48e61cbd219a759362b2531b978e4140db1a23401cd1cf4dbdc9a0b6147da3b2f0fd93c927f89174
SSDEEP

12288:6XtG/bwdibvjhdaks5j0MLCzITNJdg4NKmXrlR:qgbwduFdakKj0Mdhggf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c537619fb84c727902b3f72a81102a5a

Files

c537619fb84c727902b3f72a81102a5a
.exe windows:4 windows x86 arch:x86

c4153cc2da183c727b54c41c8c3ab9a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

expsrv

DllFunctionCall

msvbvm60

MethCallEngine
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord100
BASIC_CLASS_AddRef

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 376KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ