28b121c391551e203305f1a14127c7b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b121c391551e203305f1a14127c7b0
Size

816KB
MD5

28b121c391551e203305f1a14127c7b0
SHA1

e89fbfd042f0af0706aa73635b860fd7445b8dcd
SHA256

7e0a8ff0ff246b4965ccb317eb33162a2a68fff9d6b3846d3ab76b5dae4753cc
SHA512

fed68cfb5f96e449b07a5428611cec76fc77662d05699c6f48e3c3e10bdaccb8b229aaea7cfa07641266c3bbe7a5527c39f983663a7d62442f8e9b65c64093b7
SSDEEP

12288:6/1m2gvC8rlSVE8T0eEsu5FjA/0qVQMzBTIMts0EL6DELciyrBAgoRMg9:c3uCpVE8zz0+cqmyBsHjaoYJXg9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b121c391551e203305f1a14127c7b0

Files

28b121c391551e203305f1a14127c7b0
.exe windows:4 windows x86 arch:x86

e80c0de652952178025819032f9b0325

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoA

msvbvm60

ord696
MethCallEngine
ord517
ord518
ord519
ord666
ord667
ord593
ord594
ord595
ord631
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord531
ord716
ord717
ord534
ProcCallEngine
ord644
ord576
ord685
ord100
ord616
ord617
ord618
ord619
ord580
ord581

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 660KB - Virtual size: 660KB