2edf119b5ad2b5193c8911911950efe3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2edf119b5ad2b5193c8911911950efe3
Size

392KB
MD5

2edf119b5ad2b5193c8911911950efe3
SHA1

bd5efd3d65701e14a127c0fa6a4dfe76af0ef67d
SHA256

7de2ad591d7b548bbb9c9e9d2ca3b6491425731a3300387a2ff9a58e0a035f78
SHA512

dbc38abf14661c7f622f6d9689c90ac27226e0bb3753ace56993ba2f0aa76bc18ad695ebd8b1f6900c60f4e473c936f2d1645b18b3f57e36f49992bb11853d05
SSDEEP

6144:kFRQw1oS6ndDOJ9uPQx4pMwHvKRHUVsMgpDqmO0oTKvYFzSgAcmeUFGnkPGjTPmm:26KxjW0DDxEgoOZq2rkgMYuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2edf119b5ad2b5193c8911911950efe3

Files

2edf119b5ad2b5193c8911911950efe3
.exe windows:4 windows x86 arch:x86

b553f98a8a6dd0cb683148589278a101

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord598
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord617

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ocps
Size: 368KB - Virtual size: 4KB