2b05a851cc5667a625b6d0fa0f124893 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b05a851cc5667a625b6d0fa0f124893
Size

82KB
MD5

2b05a851cc5667a625b6d0fa0f124893
SHA1

693e7f1210c3bcc2bbcf87638d69d11ed75811f9
SHA256

d3d1cecd9f31903d4d80fb81f541b9f888b647bf54bb5c8d7a1fbc4bac263783
SHA512

7d3623ff18eee67534712f945d4e37dddb09ab9d8167426c3670e3e3a0c8548c0ab97a21fefac34d2b5feb27d10cacdf28809ec5c17aee446ab2d7d4a963fe1e
SSDEEP

768:1m/QojCpHfx0Bk6SLZRI+WE6F2UzpHjhm8f10+awm/QojCpHfx0XFNP6X/5/iHsF:EQojs5LLI+W5ljaQojR6Byt8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b05a851cc5667a625b6d0fa0f124893

Files

2b05a851cc5667a625b6d0fa0f124893
.exe windows:4 windows x86 arch:x86

96e57d09efd03a48c83f1349e435734e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ