02db2a67633f265172501d82ec7ab849 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02db2a67633f265172501d82ec7ab849
Size

124KB
MD5

02db2a67633f265172501d82ec7ab849
SHA1

a8e5d25eba76961cc5b16bc10f0a0bf884fad7ba
SHA256

7eeb2f1414f3d785f8718e3761732c084c5a8144d013bb3ffdea162165028e81
SHA512

2fa0956529bd8469bd2578a574a44a1d761706fa0cdded6e78bdfe47150926d67607e2cf8f44dca4f7c123a171f4d5fadb1d7fe7ea2490610307cf9a91c56005
SSDEEP

768:u7v+xk0gFiNMZrWjM+9Z5nS0LAy7Pu6slcTBBW+9Bkhkx/iRerSNmKFaxb1RxjYu:u7v+xkENurWNn5nS0LlKkleEci5RhB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02db2a67633f265172501d82ec7ab849

Files

02db2a67633f265172501d82ec7ab849
.exe windows:4 windows x86 arch:x86

cf42620fa9f60a10c8725a8497883c8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursorPos

msvbvm60

ord690
ord187
ord588
MethCallEngine
ord516
ord660
ord557
ord593
ord300
ord594
ord595
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ord318
ord319
ProcCallEngine
ord644
ord681
ord685
ord100
ord689
ord320
ord321
ord616
ord542

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ