560e2bb3b6460482ac2f6e371640fcf5957475761cd40025cfb38a35637408ebN | Triage

Sharing

General

Target

560e2bb3b6460482ac2f6e371640fcf5957475761cd40025cfb38a35637408ebN
Size

80KB
MD5

dfef42c6c1dcab8db1b9e0fb9c4ef850
SHA1

c57127eb80b3c6946774d64776f5c663bf3cc0c2
SHA256

560e2bb3b6460482ac2f6e371640fcf5957475761cd40025cfb38a35637408eb
SHA512

bede3924fd2904e5e477ec7a51faf8ddcdc6026cb7a288cf0e773601991b0475ce41b26e1cfcc314e494588c0128e7f98abdad07965c71ca0d3c6e7463d69d3f
SSDEEP

1536:Bz+OVyalMQJjbhMoskCLfagHwhgX0qSiSFkgRmWDCLmQJjbhMosRlayC+O:BSwJpf1kImVmE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
560e2bb3b6460482ac2f6e371640fcf5957475761cd40025cfb38a35637408ebN

Files

560e2bb3b6460482ac2f6e371640fcf5957475761cd40025cfb38a35637408ebN
.exe windows:4 windows x86 arch:x86

0a6f13b51659e82cd7c7f3b8cd4e28d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord662
ord593
ord594
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord645
ord100
ord543
ord544
ord546

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ