3ca6c2f6b910351c3210ac51bef6aafc[.]exe | Triage

Sharing

General

Target

3ca6c2f6b910351c3210ac51bef6aafc.exe
Size

372KB
MD5

3ca6c2f6b910351c3210ac51bef6aafc
SHA1

b55ae6418794a72d0bca1d479cd829023b0c703e
SHA256

5a4feb8dc6f6ba1214017e9a783e523d0661891bc78d41883e53afb4b8b411cc
SHA512

6d545363c940b30d9fe75bb9fa47b72347a76c77b611cee1a8f9db61f092d79d20ab0718ac1c6d33d7b2b778703f537bc7d14ad51dff11ae5e568fdc339744a0
SSDEEP

6144:mlmTMkJtrRTkY9fswtppH8CQUvW4yT93o0jSuxVlQTyy2oL26ET:my/G0swtbH8evW5T93zjSuxVWTyvoL2H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ca6c2f6b910351c3210ac51bef6aafc.exe

Files

3ca6c2f6b910351c3210ac51bef6aafc.exe
.exe windows:4 windows x86 arch:x86

4b59618b4dff1034a7d3a0e2d9cee2bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA

msvbvm60

ord696
ord698
MethCallEngine
ord516
ord517
ord519
ord666
ord667
ord593
ord594
ord595
ord303
ord309
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord531
ord716
ord717
ord534
ProcCallEngine
ord644
ord537
ord576
ord685
ord100
ord616
ord617
ord618
ord580

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc..
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE