26ebb428b8abe217848d09bb8c9ca76b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26ebb428b8abe217848d09bb8c9ca76b
Size

752KB
MD5

26ebb428b8abe217848d09bb8c9ca76b
SHA1

95d64b20535c8d270565071d1f5916e84c9232f1
SHA256

605546096ef925f4cc05cac3e46caafd5b60a296761bf11b0ec96ed68d974e7b
SHA512

4b92f19278e45ac60d16b5ed6efbbc4f9b15564e0a3574571177133e5a3008f6a11089217a48d6666c20abf0ef935cb45f93f3bb39824586ab0278788d7ccbac
SSDEEP

12288:kYxJZaKurdI1bDh5xNyZtzvqpX6XkNiqE1Iz0Gva5HfK863vB/lk3sN2x6:wSbX3yzvy6wiW0GUS8UpEsQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26ebb428b8abe217848d09bb8c9ca76b

Files

26ebb428b8abe217848d09bb8c9ca76b
.exe windows:4 windows x86 arch:x86

a7abab77691a445de7c6dc9d0db3c154

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
__vbaCopyBytes
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord100
ord616

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 660KB - Virtual size: 657KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ