b67dba8f7cd90d7eaeaf2aabf1ecced6 | Triage

Sharing

General

Target

b67dba8f7cd90d7eaeaf2aabf1ecced6
Size

76KB
MD5

b67dba8f7cd90d7eaeaf2aabf1ecced6
SHA1

a1d7c48424f8315658108afbb0a96b89077520a5
SHA256

bdc24b8dad31f5ae2d3e9d70a54024b7283d58ffa6ab1aab3a8bfbbdd04ffab3
SHA512

25c8217c4ef76d5d8182012fe0129f21c3ba85520929a108a3e1bd0975fcc2f9deb6e0fc003a72d10636f51e158e27149dd5f95b34163f7fbc9ed73035dee9a2
SSDEEP

768:PKTTo/j1nZ1hSvyqnSE72WzpNVdTToeJrBDsX9MifM2:PKTToL1nZ1Uv4WzXVdTToesdfM2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b67dba8f7cd90d7eaeaf2aabf1ecced6

Files

b67dba8f7cd90d7eaeaf2aabf1ecced6
.exe windows:4 windows x86 arch:x86

58663e8c933b9141290d019cf03158e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord660
ord666
ord593
ord594
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord531
ord716
ProcCallEngine
ord537
ord645
ord648
ord571
ord573
ord578
ord100
ord616
ord617
ord546
ord580

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ