2183f86d2276d1f1931244d860d11db6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2183f86d2276d1f1931244d860d11db6
Size

28KB
MD5

2183f86d2276d1f1931244d860d11db6
SHA1

4b063786546ec87299759bf97b8786359d1c9aff
SHA256

3f2ac64f06365c267583f750fb7bbff1e4144c724408257b14947c76d4601dfa
SHA512

909c279acf3c2e6481720af89acd935a09b9b2588d879f8471c5c8f115e7f1f3393174ec85363edb00f5784966b5ebb2dbcb03cf03cb7107d984d08a1cc59a55
SSDEEP

384:KAd25N1CqL6yFHVksz92pDhDB75EZeMkAVIF:125N1ZL6y8DhDBOZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2183f86d2276d1f1931244d860d11db6

Files

2183f86d2276d1f1931244d860d11db6
.exe windows:4 windows x86 arch:x86

b5d980ddaf5082d19ff2cd1b98a78a21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmsystemGetVersion

gdi32

GdiGetBatchLimit
GdiFlush

comdlg32

CommDlgExtendedError

msvbvm60

ord187
ord698
MethCallEngine
ord516
ord306
ord307
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord675
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord318
ord717
ProcCallEngine
ord644
ord100
ord617
ord542

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ