58cbc1e220b6117bbf68ded223f0d3b0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58cbc1e220b6117bbf68ded223f0d3b0N
Size

666KB
MD5

58cbc1e220b6117bbf68ded223f0d3b0
SHA1

8f65b310d05ef5c1dac57281f6062524ea6a5fdd
SHA256

e490ded12b953222caa2d1e2ca6e3c51265a95ae7da3305144a4db96c235cf4d
SHA512

49be3c4a5d8436d9d603dd19fd3fd27c02ea9697db84f6f19d92f1ad5e2b575abac293c76328138368d00eb46a4571cdd85c22afbed27f3c1920af8302387825
SSDEEP

6144:T35PkR5Pc35PT35Pk55Pc35Pr35Pk15Pc35Pa:tPsPyPtPUPyPVPsPyPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58cbc1e220b6117bbf68ded223f0d3b0N

Files

58cbc1e220b6117bbf68ded223f0d3b0N
.exe windows:4 windows x86 arch:x86

96e57d09efd03a48c83f1349e435734e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ