26cc1c33c6e50fc4aaaf36e940017fda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26cc1c33c6e50fc4aaaf36e940017fda
Size

3.6MB
MD5

26cc1c33c6e50fc4aaaf36e940017fda
SHA1

9c1f5e90f4b04035ce9094b7bdd507a5becc16e1
SHA256

86ece36d6a714f1347e360cd7674354512cc97c3d716993a4006480ce86e9ab4
SHA512

d4155caa08fef628f2a97dcac0b703dfb38c86e96e50f342333aa8cf4efa3611a767f33274b205dfdd59000b24788df378ad6d69608be9c8bfcf8e997bd24b5c
SSDEEP

12288:3aufSZdOHdXCJxGpQ/lFfrvvRV1U5llw1Kgel60onHoqZm3T/m6duyZmIHAJNTtS:3aA8wsF/j2uUyBX7dQyhBWiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26cc1c33c6e50fc4aaaf36e940017fda

Files

26cc1c33c6e50fc4aaaf36e940017fda
.exe windows:4 windows x86 arch:x86

3b371544be60077b73a1008995b76da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord618

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ