006cf6230ce1e913df276688074feaf9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

006cf6230ce1e913df276688074feaf9
Size

12KB
MD5

006cf6230ce1e913df276688074feaf9
SHA1

ddeabe95b08bcede0bd3f08f97b75f74f1f43e09
SHA256

a15e15cad2e99d999b6e9feee18e0c2a7c771385ec55229068075ecfd53a617b
SHA512

6e5debec8db4117644d88c6b0eab6bf62a7ddc511f348f2a2686f89abbb2d4705fd942a11eff0083e04d8f2c68ce9fd129f655cd7f87f2d9d6972bc42c46b95e
SSDEEP

96:SFJFRRrhCJ2/4HyV55RQFMcJdSHHn3Ds2:gRPJTj6qzs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
006cf6230ce1e913df276688074feaf9

Files

006cf6230ce1e913df276688074feaf9
.exe windows:4 windows x86 arch:x86

dd1352569303e3b273bd3993f9bd7d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ