6b5ad88e61a43efb973f932e0a0d44bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b5ad88e61a43efb973f932e0a0d44bb
Size

68KB
MD5

6b5ad88e61a43efb973f932e0a0d44bb
SHA1

098aa2ecc9d9c98d3b8957bf2c79fbe370694bcd
SHA256

03f9e684e4559caf5e578d90442267664218b56d933164b6bc3cb90017bc645e
SHA512

25cd8e1864e9f70568e7b7f38742ce8115044ec1091487d74340d61bd613e53cc1f29aa451bc0030e622731ebb306cbf7eb1fca41209147400938293791c047d
SSDEEP

768:V0cepF+Yxt+mV0eMwd1Jg5YUFfbihi8x1A73mHqXUCTR+jrjaE:eceH+Yxt+WJlg5dTi2uPaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b5ad88e61a43efb973f932e0a0d44bb

Files

6b5ad88e61a43efb973f932e0a0d44bb
.exe windows:4 windows x86 arch:x86

870683beaa1f2788ea52b7a2be3bb39e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ