616966edb008bccbff6aa71d129a6548 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

616966edb008bccbff6aa71d129a6548
Size

12KB
MD5

616966edb008bccbff6aa71d129a6548
SHA1

74be5593f408f1f2183630dad5e001b2da90ccff
SHA256

e91417a53590f9196b1104220f615a6213e5447beadbf4218468527c6d045911
SHA512

ef5e8c7c189693b3071efd78c3c4f5692dcf61b7586e538a786cc2b158d33b91be3ac57358c80d44213ecb8e36ebe7460d773dad2050b55a81589a88ecc31612
SSDEEP

48:ygoFu0YWojBUDRhbWSfWJson2vhXDjtA8GKyAEsR0RMGZW/3w7BK2:IIj6HTOson2ZXDjDMOuWUI2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616966edb008bccbff6aa71d129a6548

Files

616966edb008bccbff6aa71d129a6548
.exe windows:4 windows x86 arch:x86

dcf9636c253339acb1b89e8d8c14aa55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
ord600
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ