5e0aef31256af6fa2f79e1722942e674df2e4bfc469f09a3337a89712a27d9cfN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e0aef31256af6fa2f79e1722942e674df2e4bfc469f09a3337a89712a27d9cfN
Size

40KB
MD5

a7757219ef4eb997c7854fe60d2a86a0
SHA1

66ad2035ef3d2f4e246b8872771305081db0802e
SHA256

5e0aef31256af6fa2f79e1722942e674df2e4bfc469f09a3337a89712a27d9cf
SHA512

8126302300d5a1b94363f7888da676bb86c2c9ff43f1ca1cd1e4e6784bbfc57c7ae371512f9e4d21b0c61354fcc7378be26231f2f6ab6b2ea65d58c2d791af60
SSDEEP

384:/J7640be5fdJGSJ6aUAMlltLB6GFMan9FtFtFtDVyJZHqwIVICSJicdPhhvPA:/Jd0Qii6aU3JfR9HHHCqlcJXdZhvP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e0aef31256af6fa2f79e1722942e674df2e4bfc469f09a3337a89712a27d9cfN

Files

5e0aef31256af6fa2f79e1722942e674df2e4bfc469f09a3337a89712a27d9cfN
.exe windows:4 windows x86 arch:x86

245032a982d56b01ab1b9ee9988f5fdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ