b6b3cd8720950cf3f534af11411c240f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6b3cd8720950cf3f534af11411c240f
Size

204KB
MD5

b6b3cd8720950cf3f534af11411c240f
SHA1

309474f714f611d5c7672582a602b3e5deb35fbd
SHA256

13aadd97e91bc6598fe3cf31d177cf25fbbe9f679ff3b9079272b8223574f72d
SHA512

515f84fd8b136afaeeae415ffc95dd06a3f2d64342fc728bcb3b067e7449314b883ae955e132d5899c52211947c8e0642998ee8c7e8893aec96ebc0aae68482b
SSDEEP

3072:QIdcFLEdskgrt05bnwhVh6PTPlcfaPHVZxSfhxPwVIa:lWjZ0xCVh659JSZZw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6b3cd8720950cf3f534af11411c240f

Files

b6b3cd8720950cf3f534af11411c240f
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

trvlxxp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE