6bffd5ab3f61d4046170f866569b465e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bffd5ab3f61d4046170f866569b465e
Size

311KB
MD5

6bffd5ab3f61d4046170f866569b465e
SHA1

2e967fbd3feb2e1e7ea08039312162b51b6111a9
SHA256

33b7b77c8cdf12e0e0c5e12f3e7974a699eb05e0e83436d988bb02240b739499
SHA512

e231491a4c356f7b5f39aff12a696f968de5017ff9ec6a74e86e8e60b1d599b5ad468ff435eb5c57bf87df79d3bbe5238c03d45b98feb75d3e23bcae93d128ff
SSDEEP

6144:yYZ+PUC0Qu9dxWidFSdnMXns3fxd0RxKsb1vwvip5/hU7WvsdbZISygh7S1:yYZ9rEgkRMXs3foS81vwai7bZI9g1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bffd5ab3f61d4046170f866569b465e

Files

6bffd5ab3f61d4046170f866569b465e
.exe windows:4 windows x86 arch:x86

95094e6862ac58c796d519f0663580f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pstorec

PStoreCreateInstance

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord666
ord667
ord520
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord571
ord573
ord100
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ