52485befc0177e9848b492d3d0f6a6d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52485befc0177e9848b492d3d0f6a6d0N.exe
Size

92KB
MD5

52485befc0177e9848b492d3d0f6a6d0
SHA1

e24d39fd0a045b1c2e50c7cba3cdf6976193af6e
SHA256

19b7e0b8a5efbec8a892771f595ae94b9863378a1499cc955e7e92a42408c25c
SHA512

4b65fbbb3546eb73f30a862b679edceb27b041bde030385fb2af8437f87728f4bd3c835b8d7690055f018ed2357a2da3f30d391a5b93a15fab7558db94612cdf
SSDEEP

768:HWi+9c8Yt+URHAJW7AQDdXHA7CCCCCCCCCCCCCCCCC07CCCCCCCCCCCCCCCCfCC2:HWRcXD1eJakLkc2AzNKGCRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52485befc0177e9848b492d3d0f6a6d0N.exe

Files

52485befc0177e9848b492d3d0f6a6d0N.exe
.exe windows:4 windows x86 arch:x86

54d5bbeca7954ee4931c3bad857d55e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord588
MethCallEngine
ord518
ord660
ord662
ord665
ord593
ord594
ord595
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ProcCallEngine
ord535
ord645
ord648
ord573
ord100
ord689
ord617
ord546
ord581

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ