694c3ced48c137e994b0aface95a0042 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694c3ced48c137e994b0aface95a0042
Size

248KB
MD5

694c3ced48c137e994b0aface95a0042
SHA1

a68403d53c6b58cd1680fb80445d38c9ac09bb7a
SHA256

613110006583553a68e78d22413622196ed0d50a96e72ca5d9edcae5003112d1
SHA512

c292f1e5d7abeaf5e459336215082ba1b23df9ba1183a91113488b1e2ba819e16b1026876e305445d8e1ac65e43f546cc7741643cdcf8face5a52421c73dc27f
SSDEEP

1536:4xMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wm5vqhub:4GX0e1FB/DpKjCLHAm5vbb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694c3ced48c137e994b0aface95a0042

Files

694c3ced48c137e994b0aface95a0042
.exe windows:4 windows x86 arch:x86

f60d284bc19151b21257d953c5a264a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
Zombie_AddRef
ord100

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ