29f24ff7ee9f0bf626ae68dc1ee1c260 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29f24ff7ee9f0bf626ae68dc1ee1c260
Size

256KB
MD5

29f24ff7ee9f0bf626ae68dc1ee1c260
SHA1

a1310e4b0a0ee5dfb330df1c9b892bcd00643851
SHA256

7d35bd6ec634c1b4b1c69788fce83710426f3480220edc86bfa754ee64e97522
SHA512

900dd40e3f17d349ffffcc8762d299c1d7efe899ccf7425149c101f05ed9918c264950ad48bb7cd378e64ea0fc29426bce0acdb49f00a177d1906c8bf4377607
SSDEEP

3072:D2A1Hk/WMUszmS6BkH2u/CjQ6wATWb9TQa0l/4dDbzmK90ocqy4aqosAm+w90ZuO:D2gHk/jzpLamORfK9aB4aqosAm+w90p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f24ff7ee9f0bf626ae68dc1ee1c260

Files

29f24ff7ee9f0bf626ae68dc1ee1c260
.exe windows:4 windows x86 arch:x86

eb4566f8b44f4c7e5acd1f13e7f96c06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord587
ord588
ord589
MethCallEngine
ord516
ord517
ord518
ord519
ord663
ord669
ord593
ord594
ord595
ord598
ord306
ord307
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
ord678
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord318
ord717
ProcCallEngine
ord535
ord644
ord645
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord617
ord618
ord619
ord650

Sections

.text
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ