aa6db9efe92103d6c34499b0a9587aad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa6db9efe92103d6c34499b0a9587aad
Size

64KB
MD5

aa6db9efe92103d6c34499b0a9587aad
SHA1

49eb5cdddf56c2aca17f56f8860c2bd8ddb17f3d
SHA256

d9d6e186c96574ef045dbfca78516c4fa3d7a5583764a0003c8f2ea908a7ea04
SHA512

ae46f50d138cd9863d393b72cf0e9a6ea64921fa7aed04eb4c5f8874f809af95af49da4660a2a641cfc388cd917d797df4aee1a00278c6bfcbb3646f362533a1
SSDEEP

768:90aEdFbcuo5S1PeA1VYJb+xZIJ5f9GTHIqkKXz8YWhFIF0VDfz84jvsWjyV8fW:SaEdFbpiAeeVEbecd9n4Xz8PRFlsUy4W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa6db9efe92103d6c34499b0a9587aad

Files

aa6db9efe92103d6c34499b0a9587aad
.exe windows:4 windows x86 arch:x86

a059c9f0f9d59bc65f4ff82bad0cb525

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

ord516
ord632
ord36878
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
ord616

Sections

.
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ