6185ac3dd77ecaa23df286728fdeb931 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6185ac3dd77ecaa23df286728fdeb931
Size

1.1MB
MD5

6185ac3dd77ecaa23df286728fdeb931
SHA1

e3b8305069129b06afae638f7edc56a28eddd8aa
SHA256

c14b79b62114d9c6ca3e88a40306f97876fc5c2153eca6a3723d94b80c343c0e
SHA512

761538e17fffda6ba57c6435bf44640cda9fecb065ae14d17548e9da4192df75f2a44501c022e2ffe749a8ffc18ac061e277550221fe6817e2f45856a87af4c3
SSDEEP

24576:Tw2HlXlfvA4ljNz/cVnD/+EWCy769YTPJtUJJrub3NM7VdCu3W8RyW:Twgq4lh/cVNWCy29YkJrubdMJsJCD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6185ac3dd77ecaa23df286728fdeb931

Files

6185ac3dd77ecaa23df286728fdeb931
.exe windows:4 windows x86 arch:x86

6b733f1f2b65539a445e003cbaa19b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16.0MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ