b59b3d7f530040edea31fef596aba7af8854c25c3af407c93e0e3fbd672e9add | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b59b3d7f530040edea31fef596aba7af8854c25c3af407c93e0e3fbd672e9add
Size

64KB
MD5

122aadd67637339e05b2b71471cfab31
SHA1

76bee1646514fd4446630cfb3db04e7f4813881f
SHA256

b59b3d7f530040edea31fef596aba7af8854c25c3af407c93e0e3fbd672e9add
SHA512

4e979fe616fc87228fc0477e09e0b1db2f6ecc83fe6cef383b12ba9c017d977ee5805f1df088e2fd6c81b65b4f3e6e1c104464b66302a4174115beda0d603c13
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrk:KeTqavEjDWpuhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59b3d7f530040edea31fef596aba7af8854c25c3af407c93e0e3fbd672e9add

Files

b59b3d7f530040edea31fef596aba7af8854c25c3af407c93e0e3fbd672e9add
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ