6fe26eb1e188081ecd9f8c642ad28cf8 | Triage

Sharing

General

Target

6fe26eb1e188081ecd9f8c642ad28cf8
Size

20KB
MD5

6fe26eb1e188081ecd9f8c642ad28cf8
SHA1

d63a39407308a1d035523fa9e4e70727a5afb554
SHA256

35666ec0155cae7a83b390a67a5cb9d07bab83946bfcc3bca1f2319d54dcb1ea
SHA512

e232cc39357e33a14c4d9dff084256892785b5ff6fab53bf8446c21f389aabdf37d040b296ba952fed27f08a0bda3046ea32101f24cfeafa55664c158563af43
SSDEEP

96:Kwrfmr5W0QhI9rXkyo4DZWMhBiybgHHlrY160pbFr8XvNgSUtr7sExRAFFunf13r:5rOAI9rXJoBM/MxSmNgvfV8Yjn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fe26eb1e188081ecd9f8c642ad28cf8

Files

6fe26eb1e188081ecd9f8c642ad28cf8
.exe windows:4 windows x86 arch:x86

86ef28b5cc7022a78a6f443b43df94f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
EVENT_SINK_AddRef
ord529
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord681
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ