6996ab61b092628e9321f21cd5e8e1a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6996ab61b092628e9321f21cd5e8e1a1
Size

1.1MB
MD5

6996ab61b092628e9321f21cd5e8e1a1
SHA1

2c0afd9d0e4b38dc123c34e714cc1105c03a3cc7
SHA256

e64c1fcff2210a6221cb655ac2e5fc1f5cf3bb949ebbd13138eddec42e3c1123
SHA512

bd50787a15a038ee2f38b335c00eb568d22e4babc2f69fddb531174cad592572beead76bd8280665793d2b2456acfb9331e0c646af91451f9b37ecfd07b1ab8f
SSDEEP

12288:Rg+VdFVXnx6lvtPjfTL/Ff0KY5nwJnEKYdy/F/tR1R3/:Rg8FVXnSdf98znwJnEGFRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6996ab61b092628e9321f21cd5e8e1a1

Files

6996ab61b092628e9321f21cd5e8e1a1
.exe windows:4 windows x86 arch:x86

00f53023c81482217b9b96577c691469

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord100

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ