c68fa3570fe780e126239c61b926059f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c68fa3570fe780e126239c61b926059f
Size

88KB
MD5

c68fa3570fe780e126239c61b926059f
SHA1

0134973a0db8c3c07fff9f077408c10bee7b729d
SHA256

cb8c2b9cbabf68b88458a50feeaf91b8554f16b0d3162b1d87937a61ece55a56
SHA512

9dc8459becc7f1dc01f24284b6610544714c9c0affcf704a82ebf69922dc71b53fff45f9eb804a06bc76267aadc8504db57258b0ff647fee4285af8b31534d22
SSDEEP

768:2mO1Bto2RLPEv+zFcpdMWSLXBLPUA6GmgdZ:2ntouLP85SLxLPb6GmgH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c68fa3570fe780e126239c61b926059f

Files

c68fa3570fe780e126239c61b926059f
.exe windows:4 windows x86 arch:x86

3014100170185c2b9a504ac2eb0b6840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord573
ord100
ord619

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ