5df0802a56170a3e7ee656367fef744b4ee97054433d45adf2ed777c61b38ad5N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5df0802a56170a3e7ee656367fef744b4ee97054433d45adf2ed777c61b38ad5N
Size

91KB
MD5

279e4baf54d4bfa2da7ab1a5ed1e1a20
SHA1

37daf6ec435a617c59024b5e268edd18739c5205
SHA256

5df0802a56170a3e7ee656367fef744b4ee97054433d45adf2ed777c61b38ad5
SHA512

20798a2695020071919d2ae8d1f810b6dac912b56884163890ed4dd93f0e072eab936de4d679420eb5b3ed07a6a1c77fa36690ca0bcd66ef512ff96c3b8e5821
SSDEEP

1536:PmPBGugOcxWEUcIawyWDRtXdl37fevoJGIX9kz9vkOmo4LC:uXiW1UJWltXdR2cXCx8VTLC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5df0802a56170a3e7ee656367fef744b4ee97054433d45adf2ed777c61b38ad5N

Files

5df0802a56170a3e7ee656367fef744b4ee97054433d45adf2ed777c61b38ad5N
.exe windows:4 windows x86 arch:x86

e14a3dd710e645a344557ddc5f0bcb61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
MethCallEngine
ord591
EVENT_SINK_AddRef
ord562
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord570
ord100
ord432

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ