VirusShare_b5f4ccc5fe24a9a258848ce63ab4bdbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_b5f4ccc5fe24a9a258848ce63ab4bdbb
Size

28KB
MD5

b5f4ccc5fe24a9a258848ce63ab4bdbb
SHA1

93860762a4f2f9518703194cff753156cc834b43
SHA256

5fa765e2532845816161281f3ab2c593fd5d758383fa28f99e4f6bb10fa5d41d
SHA512

8c4dfecbb1e7529401615bb5c7701d71e76e8cdcf1a3592142f0d4a8861e022990a78f49f1a6d1bbc6ce4cca994605cb40db7da761b88861a330d048ea8ab37c
SSDEEP

384:pRgyO8ZOEMgaMdQo9AIl4jiCR4x+nU+x7n:0L8ZOEWW4jb7n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare_b5f4ccc5fe24a9a258848ce63ab4bdbb

Files

VirusShare_b5f4ccc5fe24a9a258848ce63ab4bdbb
.exe windows:4 windows x86 arch:x86

7e2d3598662bc5bb97ba7598b01cc043

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord666
ord593
ord594
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord535
ord645
ord648
ord681
ord100
ord689

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ