c6730d3732f82bb82fecd55589bcc7094626595da2ffb9d6a95885ec47f86606 | Triage

Sharing

General

Target

c6730d3732f82bb82fecd55589bcc7094626595da2ffb9d6a95885ec47f86606
Size

404KB
MD5

1624271b5a82f6d820aca3c95ecd8bd5
SHA1

006d3f155f39b73ef2f75dd14b4eb26897c747ea
SHA256

c6730d3732f82bb82fecd55589bcc7094626595da2ffb9d6a95885ec47f86606
SHA512

b6b5ff6d2352491d80e843c91b48c2c111a4a3503f977d881b07d8f0c390a36a4287f3544cc50749f14d7d1a18f54432d54f5a099432fba3454349eee60433f1
SSDEEP

12288:NiiYEgfNsc9/M5Wk+ajpHrja+jpgZNoSfIM:5eMWKdrFGZNo+I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6730d3732f82bb82fecd55589bcc7094626595da2ffb9d6a95885ec47f86606

Files

c6730d3732f82bb82fecd55589bcc7094626595da2ffb9d6a95885ec47f86606
.exe windows:4 windows x86 arch:x86

102dcca2f39c0124700a024f271d6512

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
MethCallEngine
ord516
ord629
ord660
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord608
ord716
ProcCallEngine
ord536
ord685
ord100
ord610
ord613
ord546

Sections

.text
Size: 396KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ