6ca01ee42f697e3b183d8ad374ea065f | Triage

Sharing

General

Target

6ca01ee42f697e3b183d8ad374ea065f
Size

796KB
MD5

6ca01ee42f697e3b183d8ad374ea065f
SHA1

558eb9712bd5f2aa224d94ce89c0f9806af03541
SHA256

43b811c024d6e1b8b23d92cb05d2788e061ce4bee1f58c4cc12833aa4f3ff041
SHA512

28b7ebea7835b960ea98e4b907c499479e0202f4fab2ee2389cfd410c4d4314b8c412b96a71d373d0b70d8680f6129c1b77d0b3a5640e0d04a4b395fc6c46117
SSDEEP

6144:EUM0LexyHPIwkvMxuPMU2TQKHQehQ+PlcPsTD:EUfFPJxzTjHjhzPl93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ca01ee42f697e3b183d8ad374ea065f

Files

6ca01ee42f697e3b183d8ad374ea065f
.exe windows:4 windows x86 arch:x86

252c110847c1c8866ba947ef83e85db0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord519
ord666
ord593
ord594
ord595
ord596
ord598
ord599
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord713
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord572
ord681
ord685
ord578
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ