d6857c3e2674e6c63150e248adaa18f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6857c3e2674e6c63150e248adaa18f4
Size

492KB
MD5

d6857c3e2674e6c63150e248adaa18f4
SHA1

d52653e942dbc96a7adb9234eaf619f67cabed70
SHA256

a9ac4ff1200dad60d8ae2ae4e292fc25c426da4377ed803e0c26f8f977d6eb6b
SHA512

488ca9c2e98f6e7027943bccfa4687d0a70ea3340f9764022cc7f050bf209f15b32bc5f2cdf9b177ee1195093af6d5648cb46b8c3ba55124221c688bbb09825d
SSDEEP

6144:91PExm1PExeQ5QjNQ5Qj24FixiTffgff0ffai8nQ5Qj11PEx:b8C8UixiDEgCic8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6857c3e2674e6c63150e248adaa18f4

Files

d6857c3e2674e6c63150e248adaa18f4
.exe windows:4 windows x86 arch:x86

dd1352569303e3b273bd3993f9bd7d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ