02296cc95d09f58627e0a756a5f92bd4 | Triage

Sharing

General

Target

02296cc95d09f58627e0a756a5f92bd4
Size

304KB
MD5

02296cc95d09f58627e0a756a5f92bd4
SHA1

e58c0940cf81598300372e09b3a61c61998a2d76
SHA256

f66298bbc422460fb2e968dc25a72ffc4284b312fbbf296d519dcebb2b8fb02e
SHA512

d4295ac98752b72b31e5bc44affe1fa6bf2d5089fc4b1852ce1961ffbd04c10b740d668ade1b0015b2993f85d1c5b4e3c7539afc9e99c220433f1fa671a8c55a
SSDEEP

6144:hnrEhvlVlTpH59qPTUfa2i0Ysrr6GWreFydKRBl7DH:apdG7Uy5eFydKRr7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02296cc95d09f58627e0a756a5f92bd4

Files

02296cc95d09f58627e0a756a5f92bd4
.exe windows:4 windows x86 arch:x86

5e6a89670019eb5e79ef3e1126a28485

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord585
ord187
ord588
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord578
ord100
ord614
ord431
ord617
ord581

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ