06770fd449aee110e6c38ff8037e0a21a3e829d82a9f1c84f9c27aa9d0fd9726N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06770fd449aee110e6c38ff8037e0a21a3e829d82a9f1c84f9c27aa9d0fd9726N
Size

32KB
MD5

28c205ba025d6ae46dc0e495cd6c8800
SHA1

590509983e26e3b3ac5da06b84858a215e07b568
SHA256

06770fd449aee110e6c38ff8037e0a21a3e829d82a9f1c84f9c27aa9d0fd9726
SHA512

b54107f10fc8af9aa3e0f7dd5c5e4bd71a992925287ea05fbdc59dede39d54b44aca9f89efb12cfd2b269c0bb96d911641606aaad93f5dea57e71fcb64cc6bd9
SSDEEP

768:sY9BjzJ6Jfm78LG8t0zuGQFstX9nIONEiiu:sYrzJ6JjG82zjQFsz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06770fd449aee110e6c38ff8037e0a21a3e829d82a9f1c84f9c27aa9d0fd9726N

Files

06770fd449aee110e6c38ff8037e0a21a3e829d82a9f1c84f9c27aa9d0fd9726N
.exe windows:4 windows x86 arch:x86

aad3e6ed6f011af8e9821ec773cf6f50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
MethCallEngine
ord669
ord522
EVENT_SINK_AddRef
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord619

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ