6ba1129da923864fe254120dc9821e76 | Triage

Sharing

General

Target

6ba1129da923864fe254120dc9821e76
Size

28KB
MD5

6ba1129da923864fe254120dc9821e76
SHA1

27ad2387898b3a709d486813fe8e7612dbc429af
SHA256

21dcbbf1bc3a128b10e0d2ed35b3823e7dbe976ac56703bccaf4deb90dbc1051
SHA512

b1a18e0b19cc040a727508073dc4e1841bad6e3fb04d032c4b5aea4c303f0a872e647060e6e9b7b255ef39f4b9305f9fefe023bc9b3f55da60a9fef40eca92c6
SSDEEP

384:YN6dHcM3y/FgMY/lnflPirxsIcKjKKqCCSJ4lD/hiIDgqgS:3dHC/FgMY/lfIjuSTKgqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ba1129da923864fe254120dc9821e76

Files

6ba1129da923864fe254120dc9821e76
.exe windows:4 windows x86 arch:x86

3931d856198fc0c285ee48cbcf10dfca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ