226b892f853ef339662e77ee89d38b21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

226b892f853ef339662e77ee89d38b21
Size

72KB
MD5

226b892f853ef339662e77ee89d38b21
SHA1

716f4dd83ec0c9077f9d3f0f7434424d11b2de67
SHA256

7195a3532bd814c30b50ed12f2a8655feef6c28e599bc12dfe730b7eac16b65e
SHA512

ac4029f05da1bc53539e3ede227208996afbd62945dc54065d81bdfa24c6a5179ebc2ab93505f828a1d8fbbe042be5c926726a06bdc1fbac61a65545997bbee3
SSDEEP

768:rpQNwC3BEc4QEfu0Ei8XxNDINE3BEJwRr3k7o:teThavEjDWguKU7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
226b892f853ef339662e77ee89d38b21

Files

226b892f853ef339662e77ee89d38b21
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ