006e3e4d3884302db37f671f5658ec7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

006e3e4d3884302db37f671f5658ec7d
Size

45KB
MD5

006e3e4d3884302db37f671f5658ec7d
SHA1

fdf0a05b8c589b53d459be63b5e6cd3075c59115
SHA256

58b1ec6aa98c12616a982842c01365be66fbf0f099849ce5938095ce9109b2b7
SHA512

0c5a2df872c92616872c0cdeeac5df59ef5c1591f0bee3b3e6f6e92d8088c3678ce65e33b406b384c3ef685c0a4a00f644e86c8b97804fb8f036aa5c3619db5d
SSDEEP

768:x47L4slipJor4dN7BAt/eTOuJOSbtpqGczPzK6ISKupa0YBJy2d+P0:u7UsljcN7A2quJOSbtpqtzLK6JNa0YeW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WLSERV~3.EXE

Files

006e3e4d3884302db37f671f5658ec7d
.cab
WLSERV~3.EXE
.exe windows:4 windows x86 arch:x86

cb1f3e510b5cd194c89ae1fde45df6fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
live.swf