2c9806ae5ad463e789232543b207c1f9 | Triage

Sharing

General

Target

2c9806ae5ad463e789232543b207c1f9
Size

60KB
MD5

2c9806ae5ad463e789232543b207c1f9
SHA1

f43db33682762c28b9b73efcefb085f83b843fe4
SHA256

e82eed0f4b6d4e15d4dd3f5cdc9d1d71a0024c2b38ab74fbfd81fd8de32f1c47
SHA512

c97efd7f90a8cfddf2a49c6033c9f004650f50931c2ea6270bbca4322c26c0362ef945d4aeabcfeeee713766bf8ec7f80a6bea913fc72dd234968eced608db53
SSDEEP

768:ttPaJ5QEyjc9pyzc4oj7oPBlhMBWMuqJZwhxvoPBnojdco:t0Q1I7kcIBlhpMuCZwhx2Bmc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c9806ae5ad463e789232543b207c1f9

Files

2c9806ae5ad463e789232543b207c1f9
.exe windows:4 windows x86 arch:x86

c451b38e2126daf9a8052b7be8b8fd6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord300
ord595
ord599
ord306
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord573
ord681
ord100
ord616
ord617
ord650

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ