2739ef4765c4ef179a26d4b2dd2cd0e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2739ef4765c4ef179a26d4b2dd2cd0e8
Size

48KB
MD5

2739ef4765c4ef179a26d4b2dd2cd0e8
SHA1

0a65c89117b2287c30f02bb0bf4c82fda8d5ff1b
SHA256

e81855c32875d6bfd28836d59cd11f6dbc5db1364099e4a2185ab3c63c771dda
SHA512

ab319ce6becbf1391e0da299de96b03cf2eebc8350209010fae6d97ed856d6dfcbf84a301526a59f29098a0b6fd029a47863e48cbaebdda34c0e4907928722c4
SSDEEP

384:XuQuRzkwIH3kE8xRxkkHsWionXAVz+9mXTY5h2qf:XQzk1H3D8TikHcIXAVzE4TY5h2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2739ef4765c4ef179a26d4b2dd2cd0e8

Files

2739ef4765c4ef179a26d4b2dd2cd0e8
.exe windows:4 windows x86 arch:x86

20a4478b5850285f955c8e360a6bb136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord598
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100
ord616

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE