06d7dc27b001216bfe6bbd1e1b61055b

General

Target

06d7dc27b001216bfe6bbd1e1b61055b
Size

793KB
MD5

06d7dc27b001216bfe6bbd1e1b61055b
SHA1

5fad6cc25bf885be434833751ae4d58a1e2e8f00
SHA256

f00a47505dc819f20608fdcf23f47ad9730742921724169eadd8cf0ba4034e39
SHA512

f5ab41a07d0dcb90c51ebe9ea58ed43aaf162cfe41102d6c5ba77129d4ecb76d7ee1d46f3bdd1e4535719f4571be6027054f92718f324c809966f903ceb6d10c
SSDEEP

12288:vvA85Nj4gpLELfp4JIjZyhsdEoT+R9Yev:vjNjxLELfp4JcZyhsyoc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06d7dc27b001216bfe6bbd1e1b61055b

Files

06d7dc27b001216bfe6bbd1e1b61055b
.exe windows:4 windows x86 arch:x86

79493a5d72fcf303e703932b7c79446d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord690
ord695
ord588
ord696
ord698
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord519
ord629
ord553
ord660
ord661
ord662
Zombie_GetTypeInfo
ord593
ord300
ord594
ord595
ord302
ord596
ord303
ord598
ord599
ord306
ord520
ord308
ord309
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord531
ord716
ord717
ord319
ProcCallEngine
ord535
ord537
ord644
ord538
ord645
ord648
ord573
ord681
ord578
ord685
ord100
ord689
ord610
ord320
ord612
ord321
ord616
ord617
ord618
ord619
ord542
ord543
ord544
ord545
ord546
ord547
ord581

Sections

.text
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrr
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

79493a5d72fcf303e703932b7c79446d

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 344KB - Virtual size: 344KB

.data Size: - Virtual size: 24KB

.rsrc Size: 440KB - Virtual size: 440KB

.aspack Size: 4KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

rsrr Size: 3KB - Virtual size: 8KB

.text
Size: 344KB - Virtual size: 344KB

.data
Size: - Virtual size: 24KB

.rsrc
Size: 440KB - Virtual size: 440KB

.aspack
Size: 4KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

rsrr
Size: 3KB - Virtual size: 8KB