2900b346657c4db128c6d3b56811385e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2900b346657c4db128c6d3b56811385e
Size

28KB
MD5

2900b346657c4db128c6d3b56811385e
SHA1

c49670996f42179e7a47534e1c6983847a47c140
SHA256

8ddbf083210b036b0b333bbdb9cd06f62b7365cda793eedfa2fcd16f33cb4c14
SHA512

30eaf8318982fba4e6d7a85252ed9cb6afa685206dfdf1b4ad4103da80ef7353ed4ed545ed26d8bb165aeb114a889451a22fe73a9882a188d7d98b78721d2877
SSDEEP

384:KN6dHcM3y/FgMY/lnflPirjsIcKjKKqCCSJ4lD/hiIDgqgS:ZdHC/FgMY/lfIxuSTKgqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2900b346657c4db128c6d3b56811385e

Files

2900b346657c4db128c6d3b56811385e
.exe windows:4 windows x86 arch:x86

3931d856198fc0c285ee48cbcf10dfca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ