VB6[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VB6.exe
Size

1.1MB
MD5

fc8e7b60eae92e9884f1f1e6e752a695
SHA1

932b03dc1443a1f8800c7baff1916d7768feaadf
SHA256

255c87ff2090b0eeadb75ce23c15b59116fed05f2f23e83059520d3fc3dfe363
SHA512

c14427b3d1677fde11ce787b0ecf5ca8824df135d6dbacf865d0a35af38efad3ceed4c22b32f7c600e38a09e32084621f14e363baf15f321c7d2b5eb26efdf52
SSDEEP

12288:NGrh0+SsqU7LONL3dOKGhqKmm77f+nLFXSttIfnORxR24vM8YeyByM9olaEU1TEN:wetMML3G1TgX7fnOJZYJByM9olarBI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VB6.exe

Files

VB6.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 976KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ