a519fe169c73fca75eb7ac6544f4db20N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a519fe169c73fca75eb7ac6544f4db20N
Size

96KB
MD5

a519fe169c73fca75eb7ac6544f4db20
SHA1

cdd08449a2e26108f313b74ae05c0fb2b47c197a
SHA256

39776712b93c838d50b42beb8c953c8c94df283539b4859d2fee23822bc522cf
SHA512

4428662dc007423ee4c06df6398f7dafdc29bc46c5f74a320bad955d1074d047ac8331ac68f2926ae8f471be07c32a7bc0363ba87033ca22e2fc32a79b898670
SSDEEP

1536:JsI4lSN7ekWWwnn/iO53EbCNBy/xA3fnP:JsI4BkW/qO535uAP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a519fe169c73fca75eb7ac6544f4db20N

Files

a519fe169c73fca75eb7ac6544f4db20N
.exe windows:4 windows x86 arch:x86

1113ef988dd88aa6f889880650d192ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord662
ord593
ord594
ord595
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord681
ord685
ord100
ord616
ord546

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ