c668be8bda6080ef000c40c8bde27700 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c668be8bda6080ef000c40c8bde27700
Size

108KB
MD5

c668be8bda6080ef000c40c8bde27700
SHA1

40961f46fd2b953dbc92c8ffb8445d571ffa3d21
SHA256

690cb0e24f513c7235c6afb7ea131e507769f30cd1ac273e51f3aaf5cb22e7d5
SHA512

1b54dd4b964be07610dade26b209948277a4e55644afe170734497346a9b6663c88bc4c8f46ea9de713de0bb6913aface52bcc50bae849ee9cc0fdcb3f7ecdaf
SSDEEP

1536:dlhpTEmxxBQ2g1tq/MR2jSCN4LuxEqFYlB5zsLNbm4byMb7ZGnnKS/3N:dVxXQ2grib7N8KSPN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c668be8bda6080ef000c40c8bde27700

Files

c668be8bda6080ef000c40c8bde27700
.exe windows:4 windows x86 arch:x86

ed78f36623388540204342150ae9e29a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord572
ord100

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ