61859cb05c9cfd5c3a63cdabb7db7a11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61859cb05c9cfd5c3a63cdabb7db7a11
Size

252KB
MD5

61859cb05c9cfd5c3a63cdabb7db7a11
SHA1

7ca3500a53d786965c973f3625d388970991f8c0
SHA256

54acb1cbbd576905abd84f45a535674823d1e17939440e8716462c935ec2a3db
SHA512

b517486340bacda6f6082c6d8359872b1ada525cba068c55ef75525b8a49a2115099d63885179b5708c2dfb4d7268806693c97c5455681cb284d0c4b4a9a20c7
SSDEEP

3072:1itn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E4w:3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61859cb05c9cfd5c3a63cdabb7db7a11

Files

61859cb05c9cfd5c3a63cdabb7db7a11
.exe windows:4 windows x86 arch:x86

380f37e41087439510743be1d04a3b65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ