6efe32759f67875800f79a8f310277fe3e6f113a89ff435b57516ed42da3043b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6efe32759f67875800f79a8f310277fe3e6f113a89ff435b57516ed42da3043b
Size

20KB
MD5

301b928c03bb13e54dfb123b36886058
SHA1

f4f87457a44c9f62df088537f4a0f32ae131008c
SHA256

6efe32759f67875800f79a8f310277fe3e6f113a89ff435b57516ed42da3043b
SHA512

b8d4722636eef7595f830937ea98525b7bd22d78ac44f9ae0e4994b4fcddca26b313ee48a2743815ab73262748e0065b1ebddc1a8c09bad2372aa72329ac62e1
SSDEEP

192:cuGAUjXRBOnyfi9fLsWQjlCQaO3xyIE4BKSTrjPbFy+dgZ9V:cuGNjXatszRY4RjTFLgZ9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6efe32759f67875800f79a8f310277fe3e6f113a89ff435b57516ed42da3043b

Files

6efe32759f67875800f79a8f310277fe3e6f113a89ff435b57516ed42da3043b
.exe windows x86

6fcd2667bdd1d78597431138462c5bdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ