d6e032780014f5d7e61105f8e0fbc49f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6e032780014f5d7e61105f8e0fbc49f
Size

56KB
MD5

d6e032780014f5d7e61105f8e0fbc49f
SHA1

4c8714ca1bb2f81db31b2c7d887cb35287575f4e
SHA256

e9adbd74478d5b9523a4da26305f815084783c8634b3701b88ddf2f1b8fa41cd
SHA512

807e6fe738e9be1c3b9629b9ba5cd275f52d7aff49919e972497f661b4cfaa6951e2d3680ebdc69c3972302295463ad8e0bc6b1ee5bfbffea931551af584631b
SSDEEP

384:5Esugs3AETUbJSUbiEX6NyIyD2fGItX8zPloJiHG0Y/ZNTeHaLLLUVxOyV0KKkgs:55knU4UJcyyGItXoPlwNT+VxOK0KK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e032780014f5d7e61105f8e0fbc49f

Files

d6e032780014f5d7e61105f8e0fbc49f
.exe windows:4 windows x86 arch:x86

a1ff58b10b378fd595229c3b4a5ad539

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord558
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord534
ProcCallEngine
ord537
ord685
ord100
ord616
ord617
ord619

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ