7e6079951b70ab62d4f03e2a6f7f01b0 | Triage

Sharing

General

Target

7e6079951b70ab62d4f03e2a6f7f01b0
Size

152KB
MD5

7e6079951b70ab62d4f03e2a6f7f01b0
SHA1

19bc14f3ff83a23fa78b73f4c8ad2b3a6be26584
SHA256

5ca7ce6960e4946f88cb429551d526a21912f57dba3fae91b89102be7e15f27b
SHA512

4a04e1e3347d527343f90177621e9a53c2fca287612f686ab7036e82844be473ade5db7c6615da83b2d4cbce2a16c845c2e5caafbf298f812722d7aa7bf592c9
SSDEEP

3072:F73e3eqCLAVBZzP/TSuhUmkbc6CSRv/vTFCY3LAFyEZ+:8CLGP/TSuhULbc6CSRvXTFFcFNU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e6079951b70ab62d4f03e2a6f7f01b0

Files

7e6079951b70ab62d4f03e2a6f7f01b0
.exe windows:4 windows x86 arch:x86

a03f08e027147f1f4d1fea8ded27b2fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord690
ord187
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord519
ord558
ord665
Zombie_GetTypeInfo
ord300
ord595
ord598
ord305
ord306
ord520
ord307
ord631
ord633
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord606
ord607
ord318
ord717
ord319
ord534
ProcCallEngine
ord535
ord536
ord644
ord645
ord571
ord681
ord685
ord578
ord100
ord689
ord320
ord321
ord616
ord617
ord618
ord619

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ