2cae60ae614c142e79620175e06b4df8 | Triage

Sharing

General

Target

2cae60ae614c142e79620175e06b4df8
Size

52KB
MD5

2cae60ae614c142e79620175e06b4df8
SHA1

0e578e3f663ae4fe17a63394e4957caee35fb84e
SHA256

e123b40e1d5db66860d91247beab76121ee85e549edc80435c7f9f1a8fb858c0
SHA512

8bac75bc59df69baf06fc05520d6011c1cc497e8c8320991e768f58b8faeab519854b6ba57ff227763305727a97a6cb784fc3f4382ae77c2e9595ff6a52e1dd1
SSDEEP

768:nLC3C4torPRwM0iws4Kh92KNzhlPlV9AcKXh4syu:N4wPRpWKh9plPlg/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cae60ae614c142e79620175e06b4df8

Files

2cae60ae614c142e79620175e06b4df8
.exe windows:4 windows x86 arch:x86

75b0b3d900d1c59366cfe7133de5653a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord617
ord619
ord581

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ