067b20157ee5078123a39f54e3579c08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

067b20157ee5078123a39f54e3579c08
Size

37KB
MD5

067b20157ee5078123a39f54e3579c08
SHA1

c53ed8c97fbbddbc656078f5afe7e1cd353b965a
SHA256

34e3ccfaaefef09c08b4bf993c1edb3143d5452f769b63eb6f2c0153049d6a7f
SHA512

7781cf40c5b7229ee36253b07b435b2c77a2627521b53204d4f408644a61011a59d54e8df44d830c6bae48092dddf03f3363ac2838cfe9e11bf43bc967d0819e
SSDEEP

768:IBn33nMkj6aNmv3fThWDHMYkEzkRUsPL96pqUEav5D8afQ0r:833j6ImPtWDHMkzGUsD9nccA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
067b20157ee5078123a39f54e3579c08

Files

067b20157ee5078123a39f54e3579c08
.exe windows:4 windows x86 arch:x86

70dd43dc35e457377872e941db49be6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord595
ord526
DllFunctionCall
ord563
ord600
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord576
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ