6001486b2d7f20824e3857e2de21414a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6001486b2d7f20824e3857e2de21414a
Size

228KB
MD5

6001486b2d7f20824e3857e2de21414a
SHA1

06b75b935d524d271ae0bcb5685dc45809936729
SHA256

05d20b6522d36b65d07879e1f6397e605c9fe9743e39fb0af646d8a5e294a0e0
SHA512

baecf1c1d62316e30b922bb69844f6ebb8a4e654486fcacdf7db29feb23f028c3e80a3f81df779e17db5bcd5108e5da89b61cdc1988b85361adc6fd77d04a593
SSDEEP

3072:JEajkdqibucqA5TFZ8j4L8yJMRD91y8rYTbCzzBppXeB:vVk5TFZ643JMRD9rYTbCzzBppXeB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6001486b2d7f20824e3857e2de21414a

Files

6001486b2d7f20824e3857e2de21414a
.exe windows:4 windows x86 arch:x86

abe1c005f70e7a1633dec48807372cbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord693
ord695
MethCallEngine
ord516
ord519
ord669
ord595
ord702
ord598
ord306
ord520
ord307
ord524
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord318
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord647
ord570
ord648
ord573
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord541
ord581

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ