6ddd394fa7a5de031b7162dcfbe69242 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ddd394fa7a5de031b7162dcfbe69242
Size

92KB
MD5

6ddd394fa7a5de031b7162dcfbe69242
SHA1

75098b9e9e098f71d7f423cc828f7e2fd6962a21
SHA256

e82718dbad03fbaa96ed59016fc0561ea80fa2483fb7eb8f6f7700a45be5b4df
SHA512

160cc8d08893982949ea51045b3e8481bf3cab68179a21f358fa7eb47714befdf576ddbf03f07f5720129db323bfc1bd190086c4ad8c8ee569f7d20abecf50b9
SSDEEP

1536:NNNHtgM1OTxKYrKae6ik9QtBUi1VrZrp1uozq6dv6hQKiEa7YKMvB484GDcSRe5y:bNNgM1OTxlKae6ik9QtB1Jtjuozq6dvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ddd394fa7a5de031b7162dcfbe69242

Files

6ddd394fa7a5de031b7162dcfbe69242
.exe windows:4 windows x86 arch:x86

f762e3ccb8c9e097847e6a7733f7b9b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord100
ord617

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ