cb57081e224bb9bc8ea871cd29363f56 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb57081e224bb9bc8ea871cd29363f56
Size

464KB
MD5

cb57081e224bb9bc8ea871cd29363f56
SHA1

a8e1eab32b13aeefa2dbcd981ea472cbd5e83513
SHA256

039f5e5f90e3145add3121702c25874a9135c9cd4066f258710a62cf4ead8e01
SHA512

19ef5c12c928d7f7abfcfb2d78903ecfeb3e66f60f6e5443349cb7bbe6ba5b0408c521308cebe208edf805e4622e3208053bb8e053687668f5856d0ddbbdf2d2
SSDEEP

12288:wl6g1GUrpX5UJbHKXpjetyl6g1GUrpX5UJbHKXpjetm:wlgJbHup6tylgJbHup6tm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb57081e224bb9bc8ea871cd29363f56

Files

cb57081e224bb9bc8ea871cd29363f56
.exe windows:4 windows x86 arch:x86

cea15918540e3b68da9c47769f12dc86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord517
ord631
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord716
ord717
ProcCallEngine
ord570
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ