6b64d4e22fb3ff2df58eec6cb9b0ae00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b64d4e22fb3ff2df58eec6cb9b0ae00
Size

240KB
MD5

6b64d4e22fb3ff2df58eec6cb9b0ae00
SHA1

5225e829f819db2f5a2f1b031f559e3f4e707a0e
SHA256

79458954567015ed8f6bc260165a431d1a926f67d32886cb8c674a85097a9580
SHA512

2bf6cccfb30c2793987ce1e42ff079c4eb1cd5d7c139252fb7d0ef99a9eed4087922495b2d8c0cbb2c7c8749be154052f470533ad7896db2cacd7cc830760a49
SSDEEP

3072:EYDVwOK5CVBnuBi1imXNjcFHItnB5uubBjVeXNmDVwOK5CVBnuBi1iZ:lVwOK5CVduYdaHqVGYVwOK5CVduY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b64d4e22fb3ff2df58eec6cb9b0ae00

Files

6b64d4e22fb3ff2df58eec6cb9b0ae00
.exe windows:4 windows x86 arch:x86

5ce75ee8dcae6bb04351f7b47cb86a56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord537
ord100
ord616

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ