6a7aacaec22518e8a8792719870a0518e726fd89d1840334f2321900dd7ce13f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a7aacaec22518e8a8792719870a0518e726fd89d1840334f2321900dd7ce13f
Size

220KB
MD5

92f10e2b48ca6e228b09042f5afa0ed7
SHA1

d4b06e8f983f6f310eb53a14fc091d05aa3c7ad3
SHA256

6a7aacaec22518e8a8792719870a0518e726fd89d1840334f2321900dd7ce13f
SHA512

5b19dcccc9a38222d9db26e6252123cdbc63d7a6b9fff1755e1d44bb03d0e3786bccbcd4aac2eea78f1acfc681e8cbb7e4f9b64825772c6f7fcf6b37fa2d086d
SSDEEP

3072:kchG+ay/f5Zz+FoiCunhZrQ1CMxRrH20sgXh0vGC/mzDDYrHFENRl8/DQ+OLtEF7:kchDay/BZSFFvAGGumzQr48DQ+ozd2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a7aacaec22518e8a8792719870a0518e726fd89d1840334f2321900dd7ce13f

Files

6a7aacaec22518e8a8792719870a0518e726fd89d1840334f2321900dd7ce13f
.exe windows:4 windows x86 arch:x86

e9e611897fb474a1df08f6e02e35b7e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord690
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord300
ord595
ord598
ord306
ord520
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord319
ProcCallEngine
ord573
ord681
ord685
ord100
ord689
ord320
ord321
ord619

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ