601cda56fd9ea3cec6e9e022729044fdad200f8f6d8b877b19ca7e2039c298d4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

601cda56fd9ea3cec6e9e022729044fdad200f8f6d8b877b19ca7e2039c298d4N
Size

40KB
MD5

de58434d1444ad7c45aed611e8b037a0
SHA1

4b88d0999e9974f8a44f82a4aa4474590ebff183
SHA256

601cda56fd9ea3cec6e9e022729044fdad200f8f6d8b877b19ca7e2039c298d4
SHA512

dc45bf9601570743ea3fba7d1ad180612f44b56f9a1007c79808064de19cc5227f4814187c6261a7a80894b26794c37ce2a8d0b7116b101ccd52c90aa6580cde
SSDEEP

384:FVEryYqaYQq6sZi1flqPrS9PK1cQv83Yr3nghjzJHMOE6a7nMuME9B9dMFpq:F2y01c2yBv8unDOEXMFE97dMFY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
601cda56fd9ea3cec6e9e022729044fdad200f8f6d8b877b19ca7e2039c298d4N

Files

601cda56fd9ea3cec6e9e022729044fdad200f8f6d8b877b19ca7e2039c298d4N
.exe windows:4 windows x86 arch:x86

a6d276b066013449daa75b5430031284

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord518
ord662
ord593
ord594
ord595
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord645
ord685
ord100
ord546

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ