6e7bed0b238c4a42aa96a620a59acd13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e7bed0b238c4a42aa96a620a59acd13
Size

20KB
MD5

6e7bed0b238c4a42aa96a620a59acd13
SHA1

97c4d61a4902ad7e841089b2f45d98c13d4eca89
SHA256

c640258538e40b482499fb79e47e6ea3013a61de44fecad6fca9aade7be356fe
SHA512

14c1f2cacfaf9fcc0ba053d4c3ccb88bd6ebbefb6542decba7328bf280d45ed65fba6e7f427f3473d2f4793ef91cb48e3c54a6298509b113c689e423022abbaf
SSDEEP

192:tXQ0m3vq24s1XGmNTcBdTUfiCu7FwnNxJWz:tXQ0mfq01XGmNiUqV2TAz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e7bed0b238c4a42aa96a620a59acd13

Files

6e7bed0b238c4a42aa96a620a59acd13
.exe windows:4 windows x86 arch:x86

b4948947ea98f501df7687077a5b83f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord518
ord666
ord632
ord529
DllFunctionCall
ord600
ord601
__vbaExceptHandler
ord711
ord712
ord608
ord716
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ