b696f21332e93cf60a9722c3ff8d0349 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b696f21332e93cf60a9722c3ff8d0349
Size

192KB
MD5

b696f21332e93cf60a9722c3ff8d0349
SHA1

be8d321ffeda63757c3baf8f6fe1a3c820a2cdfb
SHA256

45171c12a771222e9c6ed0cd3a78e31c06a5d5bfbb38c4c4523355b362a02b1a
SHA512

8874d6357e24d49ff278ca009beee4f4b5803ed23a950cea8bf3246d16e65647d0c9541c7744f80742fdaa65b8f5f84b61b8936f15b3c361af2aca09640ccbd1
SSDEEP

3072:E3EUPAUM8K08rRLkeTCrJ1zbxRhsfxc93HBTRZgz3f92pvw8OCqro1r6AtfhXL+:8BPAjEWTgJ5xRqZc9tsz3fU48dV6qhX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b696f21332e93cf60a9722c3ff8d0349

Files

b696f21332e93cf60a9722c3ff8d0349
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ