d5fa9fd2c8d09939a655233f849ef9cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5fa9fd2c8d09939a655233f849ef9cd
Size

152KB
MD5

d5fa9fd2c8d09939a655233f849ef9cd
SHA1

82057ee0d139f82c3742e5c899669047fb6956ad
SHA256

6fefe9e59409981de072072ba53e7dac1b013d089ffc9997230ec38e270e12f2
SHA512

f800393de0fe9da0167e469c9350f266807c8acfef91bba7dace42b3a8d9aa77c3ccbf002a753559e17c2e5dabf732587b0eeaff3a92ec0de1acf185591ecc09
SSDEEP

768:WOKrI8wMiLJRh59p865JdLPgQrEcdSNEWZpKqupvQspraeDxdC5HwV7j3y1CgkZh:va8RZ865JlPRUqrO5Igkb4hdQ91bf6qH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5fa9fd2c8d09939a655233f849ef9cd

Files

d5fa9fd2c8d09939a655233f849ef9cd
.exe windows:4 windows x86 arch:x86

2771e1fe52311a49c96e3f95817aef5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord644
ord100

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ