2739cabc4e4497dc11b59944a35fb948 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2739cabc4e4497dc11b59944a35fb948
Size

373KB
MD5

2739cabc4e4497dc11b59944a35fb948
SHA1

ac5280a467f2e33ea690388d5c5c2b235c5a0a70
SHA256

77f6cace2337d80729a684adebee65103d9bf230a428122c1fb694695082931d
SHA512

feb7c5530acbb5cff08d0f590e3e5e2373b123cd65a8ee3c6fa3da046c6fd24274880c1f55b64775227429b73bbb7db8cb4f245d118975b65e898e6aacf83aac
SSDEEP

6144:/cm1rb8N9bB+X1qq5Ba24yOqJ+G0+hPvT/UQHdhYPj+gVQgRAXxZlAh:/t0PElN5o2JOGfb/B9OPRIBAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2739cabc4e4497dc11b59944a35fb948

Files

2739cabc4e4497dc11b59944a35fb948
.exe windows:4 windows x86 arch:x86

6b733f1f2b65539a445e003cbaa19b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16.0MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ