228a5e4f26026d544a1714727fd1d60d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

228a5e4f26026d544a1714727fd1d60d
Size

424KB
MD5

228a5e4f26026d544a1714727fd1d60d
SHA1

45d83c1a2ee581a16f2455e6dbddbb4efbc7c9ed
SHA256

f005c6f1f37b5bef234293e193314aff64ff84bee0febc5126459d87a3602332
SHA512

8afd0bfbf7569e714e4c1a518f9f1db2a4112bd4f47909b59fb5d68ac773686469e89b7d42497a5d2d041e998da4b9181b1e0362595683b7c8127b99519d1e00
SSDEEP

6144:wEXE1VxoKISv6EXE1VxosISvAI7kzE95CjlOSX5ol6TMP:+jxoKISojxosISHkA95Cjl3X5oAQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
228a5e4f26026d544a1714727fd1d60d

Files

228a5e4f26026d544a1714727fd1d60d
.exe windows:4 windows x86 arch:x86

09cbb1fc35116490943eec7c368ae1be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord595
ord596
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord681
ord100
ord617
ord619

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ