2bfc40b3ea0ccefd86e85bbb0869ec89 | Triage

Sharing

General

Target

2bfc40b3ea0ccefd86e85bbb0869ec89
Size

68KB
MD5

2bfc40b3ea0ccefd86e85bbb0869ec89
SHA1

77975817d63465ae789b086abc3d4f7a09d470ad
SHA256

7bf7be98944972d93147b12d3bd874ce0208af6c4259fb56a31e5105faab4fa4
SHA512

ab7fce71c6fe247b90dfcfd1fc8a67983feb23fa62714af9ba4b483ee0178244d76d5ccd69668ce58a690f99cc0ad45f4b8c74c86ce767ad618c38e149a03535
SSDEEP

768:tcxliTdu0ZAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:qxIxlAcqOK3qowgnt1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bfc40b3ea0ccefd86e85bbb0869ec89

Files

2bfc40b3ea0ccefd86e85bbb0869ec89
.exe windows:4 windows x86 arch:x86

c7005d5e374c770dd6e3b206fd4b8803

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ