b6bc381f9904fe453a2544c8a0777e38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6bc381f9904fe453a2544c8a0777e38
Size

271KB
MD5

b6bc381f9904fe453a2544c8a0777e38
SHA1

a9a3c576cac525dc627245e6cd7f2237f85b53a8
SHA256

a79e465493b78dc4e01f1227f324874a048238525a893e3dfd1ee04ccbca475c
SHA512

4b5a8cc2c8b0cfd39b6e12bf798bb160882f14a42141ceaa31ffa2da39ba605b0821f679e139d1dc66562f34f3da1e1594f9441f0c363d2a790b0a4cac21812c
SSDEEP

3072:sFriYTweIIEX/0hc1rBr3Fl5IlLyuvwIUwUZTPWniW9X:WTaDSyGnUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6bc381f9904fe453a2544c8a0777e38

Files

b6bc381f9904fe453a2544c8a0777e38
.exe windows:4 windows x86 arch:x86

5240e2db1867a03f8264db0576c23e53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord616
ord618
ord581

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ