6729cb09a18e18badf02f217e6a34404 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6729cb09a18e18badf02f217e6a34404
Size

48KB
MD5

6729cb09a18e18badf02f217e6a34404
SHA1

6076740ae8f39694460236b5ae83b7d57fc0c8d2
SHA256

4bd70b89519586db45a0685b59f1b24383bd7de0cb741378b3dcce2ca59535f8
SHA512

662cb3e635731076cc67b69b48c8737b716b930b3d96ff09e580e0fe837bc24b724bf841432f14183070c3b47bfb346592cb358c76bb534d811b9630763d4f5d
SSDEEP

768:ciNUTYjGbOJNONjCVPCEsokl/9++ejJR9ec:ctMKb1ucokl/gMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6729cb09a18e18badf02f217e6a34404

Files

6729cb09a18e18badf02f217e6a34404
.exe windows:4 windows x86 arch:x86

2b95def43c645bdec2b2bb4bc3b94fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ