6c4bbcffa81b0d339d55f986a26ae268 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c4bbcffa81b0d339d55f986a26ae268
Size

100KB
MD5

6c4bbcffa81b0d339d55f986a26ae268
SHA1

d1abe076dc5a538e23b0139d6b4fa5f85fe33dd8
SHA256

54cebe179bdc4fe2fb3ff2ce1ca5f74935212d85b85fbfbc0eed49b88924e757
SHA512

bf61857b0aff3e448bf18f3aa2b6827948b3bbc369c808ef6242120f5981011e83f47966e8566050ef463fcf43a747423501b42f476def79e4bbb905cf643330
SSDEEP

1536:ALt0x82NTdwBLGZcYADZPU1+73BD88b0nyMNIjnZr7:rwggZPUQJMCnt7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c4bbcffa81b0d339d55f986a26ae268

Files

6c4bbcffa81b0d339d55f986a26ae268
.exe windows:4 windows x86 arch:x86

8971d7ab98c65dd07386e484ab036050

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord578
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ