2285464ca045dfbb3c170f8487a22a12 | Triage

Sharing

General

Target

2285464ca045dfbb3c170f8487a22a12
Size

168KB
MD5

2285464ca045dfbb3c170f8487a22a12
SHA1

8d4891a53d9b5cce1351a4361281b6b164cce485
SHA256

ec93c48ecd8b7dd6878d2b41fb301199fd5150c47d578a37d7bb4ef0d290877c
SHA512

4737dd58ad5f4e5c26a72db31d6768d9bcf504432b8b89be2a4e6c2a2a9a27a01838af46123801373154dceb22c80c87b7ff60596071a4f3c8a8f4462eaded35
SSDEEP

1536:rso6Gv9cgru9sAAognYaMM7d0jmGxQkJyPCqyDCqyR1BE79V+xMBcRY5X8/h8SBl:f0jpxfJtEhBIMcKB4ISKIU0jpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2285464ca045dfbb3c170f8487a22a12

Files

2285464ca045dfbb3c170f8487a22a12
.exe windows:4 windows x86 arch:x86

fb5db83d4d5ef46dfdb27f18416f30a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord667
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord645
ord648
ord576
ord100
ord689
ord616
ord580

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ