51a4dc93860c54453c55801c1b0d4ccb420d82fbe58fbf86e46eadac0f78c91a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51a4dc93860c54453c55801c1b0d4ccb420d82fbe58fbf86e46eadac0f78c91a
Size

64KB
MD5

e5cf0e2ec50ea8d33aed7c47f79e8532
SHA1

11eea1f5283627cfa9cee3c06713a4b9f7fdcf7a
SHA256

51a4dc93860c54453c55801c1b0d4ccb420d82fbe58fbf86e46eadac0f78c91a
SHA512

d80d21bddec3b1344de125381d707863fd3bf78396bbbe14e4fcf0b5f7ef720d41bd872570b181c2f6833362f1a2769bd3339fabdd88010059489f2f7b94541e
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsro:KeTqavEjDWpuho

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51a4dc93860c54453c55801c1b0d4ccb420d82fbe58fbf86e46eadac0f78c91a

Files

51a4dc93860c54453c55801c1b0d4ccb420d82fbe58fbf86e46eadac0f78c91a
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ