22402ec926bca94d72b4bea81567b3c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22402ec926bca94d72b4bea81567b3c9
Size

44KB
MD5

22402ec926bca94d72b4bea81567b3c9
SHA1

f799fd99b2a7f82a5be19651beadf31ce2f0b157
SHA256

be9141d6e0c1cbfdcffd76b6e8a5169b63062ad09c5aedd17472b4ce58bf0951
SHA512

8d4e5985af4101071d16053d128cbf6ba26633e72588a1338c8618d6a2600b7f124b423f786e6957e3e0b76bb0d8ab07406cecec085c71df4b90c4a60b82c71f
SSDEEP

768:od1xgOJ9dPgaqRyy6pKEq2GfKEAAj8n8MjMTQQATDWARABAUAuD6ym:oqS9hIRyvKN25Efj8n8MjMMQATDWARA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22402ec926bca94d72b4bea81567b3c9

Files

22402ec926bca94d72b4bea81567b3c9
.exe windows:4 windows x86 arch:x86

cb3f7a3fc1b0936a1dff0220e4d6b793

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

MethCallEngine
ord516
ord519
ord593
ord594
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ProcCallEngine
ord537
ord570
ord648
ord100
ord616

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ