6ebb3513770560716015d4c02d0d8a3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ebb3513770560716015d4c02d0d8a3b
Size

24KB
MD5

6ebb3513770560716015d4c02d0d8a3b
SHA1

a282dbacd84a4fde16ca26beea90bc81f389ce8a
SHA256

e56c869350bfa4cbd2d7fd2a06666794137cff1c6fd41d77ca42769b1c61a94d
SHA512

cc99bc4f9a11c010c02063a3435f5a1eee30f180323c70f12b4966b37b96ba47e1daa4bd304d2534ce07ce602159c241b89f61368e57dde888d36632ca9f48b9
SSDEEP

192:JRBqC0tjswJdjvLeNuVi6CYa2eOaI89S9RSyyEeq:JRBd6jswz2Yyy8ce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ebb3513770560716015d4c02d0d8a3b

Files

6ebb3513770560716015d4c02d0d8a3b
.exe windows:4 windows x86 arch:x86

18ecf0b703d5718147ade486d408c7fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord573
ord681
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ