67b226e5e6f7f3202f570ce2f7d71143 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67b226e5e6f7f3202f570ce2f7d71143
Size

756KB
MD5

67b226e5e6f7f3202f570ce2f7d71143
SHA1

13788fde3995ef48f5c5a72adff8d6143a6b9955
SHA256

dd4815905eb1cc4c2e724a2d6b3b1694137fb7b8bd3cb0f6b6a0e17e94b281dc
SHA512

ef7bc710631a396856a5275ce83edb6a95484a250a706f06c7992df77fa9384c838e3acaa457e03e9938bf0ab2f082c46366ea01f817c70ef2ec3033453e4695
SSDEEP

12288:a6OvrBtrD1E1HdkBqVUTzWBSAsyffc9vRYLic1qMQ8xL+j/0:a6Olk1Hdk88Z35mLicYcxajs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b226e5e6f7f3202f570ce2f7d71143

Files

67b226e5e6f7f3202f570ce2f7d71143
.exe windows:4 windows x86 arch:x86

6d70c30e054d5b2ff4419cd62a496d0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
ord617

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 608KB - Virtual size: 606KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ