6873048fc82501f62e381913107c50f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6873048fc82501f62e381913107c50f3
Size

32KB
MD5

6873048fc82501f62e381913107c50f3
SHA1

88de036d5548b711802b725f80e2d462cef5d6da
SHA256

e0098bbfb52de688f143042ec3804dd5e7eba44d331a39069dfaa2eb3f4d5574
SHA512

a8aa45371d0ede6ab136c9b42cbd4d733dc3b48cde03ab625822a7fe7f7becd50cbda8efd1037a65e4ed0107cace703de2c7391a003d74428f2b1809b0df729f
SSDEEP

384:iaTsh/6duVQ86cD5EdX7ljQELWFd67pw5nifibwCX4Cd24NMwneD5Bqm1Hoe:1Q56duTI7dQE6fn2ibwCpNMcKBT9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6873048fc82501f62e381913107c50f3

Files

6873048fc82501f62e381913107c50f3
.exe windows:4 windows x86 arch:x86

a53530a1e911869a76585a3c5ea833d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ