226f9d7e1d2193b5f2c324996bd35808 | Triage

Sharing

General

Target

226f9d7e1d2193b5f2c324996bd35808
Size

48KB
MD5

226f9d7e1d2193b5f2c324996bd35808
SHA1

e4a2409471a555806a13eb6293fb364a221bb063
SHA256

98c3d1b928172dda6106aa3322a7363f7649192cd5bfdcf76d8e709911e97736
SHA512

dc74973c16d2a7f69983e32e0fe6973c98eb4516e46b1af13b4f6f94475cf5a834ec93b9133a58c4ab9faaa698a780dcb8f6b384ef3045f2680d4200af5ada2d
SSDEEP

768:LvjQSv39SNGOONWnNlVbsCrQbzAXst+hGUJ/h:LKNGMnsoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
226f9d7e1d2193b5f2c324996bd35808

Files

226f9d7e1d2193b5f2c324996bd35808
.exe windows:4 windows x86 arch:x86

089285b24149f7aabf70d32fa53f5bd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord595
ord598
ord599
ord520
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord533
ProcCallEngine
ord537
ord645
ord647
ord648
ord681
ord685
ord578
ord100
ord610
ord612
ord616
ord617
ord650

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ