63e76cf21d3593e6fa05b34ed9d3fb55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63e76cf21d3593e6fa05b34ed9d3fb55
Size

56KB
MD5

63e76cf21d3593e6fa05b34ed9d3fb55
SHA1

1c59abe602b5fa415367d97f9964be4d8a91619d
SHA256

684974522123ec991da008033b0b2fe938ff95a1c3efe7772860e4eb8d9da99b
SHA512

ecdd6718418e00ee2df29063ab0fdb1ea71e101390f2c52e73b6d4fd4a9e63d555643e75fc00fb4728537ec07f7ed46d251d885090827b07e27e413b98735ef5
SSDEEP

768:yH8UxYTRwUc5uTQ2oo0vG0xOPK67sk+UhKF9Ct3DexWH8:yPYTRwUc5KchpsP97skVhBT4W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63e76cf21d3593e6fa05b34ed9d3fb55

Files

63e76cf21d3593e6fa05b34ed9d3fb55
.exe windows:4 windows x86 arch:x86

57d1ba3cfd6c970f3be575ce30a20870

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord660
ord666
ord593
ord594
ord598
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord537
ord645
ord571
ord685
ord578
ord100
ord610
ord612
ord617
ord546
ord581

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ