aa6f8ae4a842d1455118cf749777e3b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa6f8ae4a842d1455118cf749777e3b0
Size

20KB
MD5

aa6f8ae4a842d1455118cf749777e3b0
SHA1

1f42170052c6eab092840bb007920eb0124763c7
SHA256

4c8cce16682a01ec4e617a41113c6f16760d716063264b58e33896e6dbe93aa0
SHA512

a8f3fb01c8be26f78b715af94270fd544f096f814509185bcba45e38c4710e948b64a3d4426a5cd7c9676e5f1ccef73caad450a1ca531629a80f3b4dcefcfff8
SSDEEP

192:iowCaZOOo0BX2YQn8d68JZ3YHcGKRF4HKEEqo6z9iO0Ub24y6CW4IYJH:iow+Vn8dFJZJ2u6zZ24y6CW4IYJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa6f8ae4a842d1455118cf749777e3b0

Files

aa6f8ae4a842d1455118cf749777e3b0
.exe windows:4 windows x86 arch:x86

ebc20a2f09abc40459ab86d9ed3b4dcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord593
ord594
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ProcCallEngine
ord537
ord570
ord648
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ