68a874735eab96e5950ee2ed20aef0ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68a874735eab96e5950ee2ed20aef0ca
Size

152KB
MD5

68a874735eab96e5950ee2ed20aef0ca
SHA1

03da488b371e6269817814ae63df8a5ebb85e7fa
SHA256

dc496f40b40c30a88903584a47adf0191e8caf95266bf64ebc3fc31d966f27fd
SHA512

9cd5fa4699a3ff1afa1c5a8307d3b92c735b3d2981f1d9ed0ffa0086aa880777b311d9d8c8c9dca0ce62473ba87fdf841977f55a638f53c12392c2e4c1043bff
SSDEEP

1536:FQWf83W8W60IT26Ap8iJGBeb0LAPkAR6g4tFMSfpkfhsRjvd:hCDh48iJcevMvg+FKZojvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68a874735eab96e5950ee2ed20aef0ca

Files

68a874735eab96e5950ee2ed20aef0ca
.exe windows:4 windows x86 arch:x86

ea23fc29d95be057d4e7c6b77d74a60d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord595
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord535
ord645
ord570
ord571
ord576
ord100
ord617
ord581

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qiltlpo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE