6da0366ca59039c683623445dcd44ee2[.]zip | Triage

Sharing

General

Target

6da0366ca59039c683623445dcd44ee2.zip
Size

29KB
MD5

81d979a4dab43a50356ed472f35f24d2
SHA1

51163e64fbadee1f9f3962666c0858b72d9ef8b8
SHA256

8ddb71958aa5e91ea9e6d5c90153614e717a08250d7b78439a09502ed4edc881
SHA512

aaaf7c6034a677198cb2d3750e1ec16786ded94055cefc2f34c73742d5f69f9a5b381b41084d4b469326764c7e485f6f302efbaa5ba28b19b59e4a750f9ec308
SSDEEP

768:5yu3ddUJcw0qmIua7ritRVkqlzuxPGEc81zIsBjc0fFkb:RNdUUqbVORVTUxSBgjPfFkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/74efa119d7f93fdf120e929f44cd42a9472244e165dbaf47568d7eb1b8898938

Files

6da0366ca59039c683623445dcd44ee2.zip
.zip

Password: infected
74efa119d7f93fdf120e929f44cd42a9472244e165dbaf47568d7eb1b8898938
.exe windows:4 windows x86 arch:x86

Password: infected

1d08d703f8ec81dff9da409d9a6a4c9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord518
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord528
ord670
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord617
ord619

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ