061ffadcdb1e5e17b7ee4b280335afd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

061ffadcdb1e5e17b7ee4b280335afd7
Size

177KB
MD5

061ffadcdb1e5e17b7ee4b280335afd7
SHA1

d2786e443aaa293176363c007ef12713c484a943
SHA256

8e13fffa59ecd57eb067b1ccd0ce912b83c1c592fcb739fc87e789b9ab61af26
SHA512

8164e01abe80f319150415d7dfc4116f4654232f6d84f309543d1278af81b2c52b50a4b8fa6d19a8e8cb32ce35ebfec9ba0e60dc9f7263e11f5be6357659a657
SSDEEP

3072:e88DoXr5WT/KnSNr6kFKzG062BTPkyz6Fbyc6h7LBLe2MP++ZZYw4kCaaCjUu3OL:e8L8/aSl6stJOEyc6h71Iu1OaCxErQUx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
061ffadcdb1e5e17b7ee4b280335afd7

Files

061ffadcdb1e5e17b7ee4b280335afd7
.exe windows:4 windows x86 arch:x86

d903b9c3a1e8a6686630e16278aa31a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord595
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord530
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord578
ord100
ord431
ord617

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ