6179ffe2b80e14e9f425a0e8843375fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6179ffe2b80e14e9f425a0e8843375fe
Size

40KB
MD5

6179ffe2b80e14e9f425a0e8843375fe
SHA1

af59c2d70988db0c16effa9ee832f475a44eaa42
SHA256

e15494590afc2f4e5a7ab3bcda166c2f6527c36e879582c7692046116ca7f90b
SHA512

fc9c87995731c19675f890f0d5535ec4c19d97b3d400566c5a6bf120903bc7748ac6611bcd94fb2429a1db872fe422ad0dd617618e8835eb4156ad383ec12a56
SSDEEP

384:KDDR2p4OlqNtfTrMUIi79aEYbVT7UTiKpSay8:KDDONqNFTrsi79+CmKpJy8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6179ffe2b80e14e9f425a0e8843375fe

Files

6179ffe2b80e14e9f425a0e8843375fe
.exe windows:4 windows x86 arch:x86

f4df14a53e24d9044f61832c8aebade7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE