2741da6d2918d58f37c97d07148eda72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2741da6d2918d58f37c97d07148eda72
Size

125KB
MD5

2741da6d2918d58f37c97d07148eda72
SHA1

d1baee2574d9eb672e7c01bd00106f1c2cd23d67
SHA256

57c13ef87a3f43c35f6f7bbe65b06548128498b5bcc528093c43d9c3a0967ba6
SHA512

6c7b73b3b38052c989206f621001880f29c655e26c24ed7063652e38d4a53b32d155adfa91a5086253ed6ca281071e9b806ac868f145c3d6612c779d5d828b60
SSDEEP

3072:/I7A2RgxMKEr9WflVflA9+Fs6EFVFjRFaKfp:GA2mxMK29WPmcFs6EXTFaKfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2741da6d2918d58f37c97d07148eda72

Files

2741da6d2918d58f37c97d07148eda72
.exe windows:4 windows x86 arch:x86

c1966b0756465dbe9829e1efca51bba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord595
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ