002a9e08f33248976f140c6dcbe5d131 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002a9e08f33248976f140c6dcbe5d131
Size

48KB
MD5

002a9e08f33248976f140c6dcbe5d131
SHA1

9187e1ff3ad3765fae2a1acb1c057db022905571
SHA256

cb1a8f6ac5bc50cc26393449eda6c3a27f64013297a548ea5ba1f384bfed11d8
SHA512

fd02bf5517487a3b4cfa70a2dbbff37cba029747687eb8aa2c7b04cd3816e459e1336dfa9bb6ab1605ee809e6a7f09aeec03a90c9fb770517adf407eca3aaa0f
SSDEEP

768:CwyX0xlbUwVddPo1Oh/0a7zuSIxcju3fVNX3X5wQy5:KXmUwsZJZVn5wQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002a9e08f33248976f140c6dcbe5d131

Files

002a9e08f33248976f140c6dcbe5d131
.exe windows:4 windows x86 arch:x86

796d17b152d2d655e7efa048e99d7730

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord516
ord628
ord593
ord594
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord713
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord571
ord572
ord578
ord100
ord689

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ