2b8576dec2ec6c58997c58b438a196b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b8576dec2ec6c58997c58b438a196b5
Size

416KB
MD5

2b8576dec2ec6c58997c58b438a196b5
SHA1

c52ca0aa33339f7ce8c75b54df228b3279326ef0
SHA256

cb8547cd7222563b8e893e794560ae04b683a389bcb30eadfb5de52b03397acc
SHA512

3c0c557179ce820139d66e02d2f07a7842cc3ee937fabd02b6a3d3403cef9d26aa16ab3eba3736195fa9797a981d0a0a20b8fd0d6bdec3867f986284d3679d95
SSDEEP

6144:dInYv4FmJwMTIqAyv9Q+4Osqtlwtn3E0sRwO66Z1SnoAHBVX199qqpoVFBxe:OU4FmHCletlURinZ1qphVb4qK5xe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b8576dec2ec6c58997c58b438a196b5

Files

2b8576dec2ec6c58997c58b438a196b5
.exe windows:4 windows x86 arch:x86

8365ffec781de3f914d89a19788db090

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aaaa
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ