6377cff25fbbd00595041d4deb85a27f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6377cff25fbbd00595041d4deb85a27f
Size

44KB
MD5

6377cff25fbbd00595041d4deb85a27f
SHA1

559c7014e468d5b6ba6b6de10cc89ce9a19e3a2d
SHA256

64463655f9e5d9717ff896f5fac2330f24c1091ef671975c1686b089292d921f
SHA512

ded20cfafba0d000f98d28467f5e39237313adc2d65bca2aa0de94b9cdfd390b6060e80cef9e5691ae527bcee258d5ed3ffcbe3b839ffb0e04109c2ba15573ca
SSDEEP

384:gt+T1lGX00AaoEdy6Ss2Irb+AnKOHIDnpKusmwLDelCsEEcuQyIbQEdgPYzx4EQq:gty14k0B06StIaVI47Pk8fzYvFc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6377cff25fbbd00595041d4deb85a27f

Files

6377cff25fbbd00595041d4deb85a27f
.exe windows:4 windows x86 arch:x86

81a604be07dfbba9a2e7a25e1bb71c8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord598
ord631
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord681
ord100
ord616

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ