6f8fcbdcde62dce38476855839b20968 | Triage

Sharing

General

Target

6f8fcbdcde62dce38476855839b20968
Size

132KB
MD5

6f8fcbdcde62dce38476855839b20968
SHA1

ac17499cc2bdc05f056959face6d72133f1dd0dc
SHA256

73f5ff9a46295bc0786f531303e4ef6f4734b46d7571926f7ca9c88edb4d0a16
SHA512

5ab4eeb16c9f56510ca385f9b7bc343d02d884bcc82a2b8755d5955abde3bcd611dc37d233c0ec136e7a9a44febe159e97e65b00a603f9a0ab4fa3ac5892c26f
SSDEEP

1536:WtIknd5QGql7n4sUIioDFPNjehf3FALGPoP/AEI2R3dg:WCknXIn4sU7oDFPIhvFALGgHp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f8fcbdcde62dce38476855839b20968

Files

6f8fcbdcde62dce38476855839b20968
.exe windows:4 windows x86 arch:x86

d4f9e215681bd160ec19892eff2b80a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord517
ord518
ord519
ord669
ord593
ord594
ord595
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord609
ProcCallEngine
ord644
ord537
ord647
ord570
ord648
ord571
ord573
ord681
ord685
ord578
ord100
ord611
ord613
ord616
ord617
ord618
ord580
ord581

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE