2b811be2c91053204b6acf5464f5c461 | Triage

Sharing

General

Target

2b811be2c91053204b6acf5464f5c461
Size

24KB
MD5

2b811be2c91053204b6acf5464f5c461
SHA1

f83d4bec648fc226dff5ee7ba10e7854d6b67d9c
SHA256

7360375deba54585080ea40d9bc25bffd9461e7cb874ac840bb3f903f9f4a05b
SHA512

194f9fe418fbf0faa00fa5aca39e3442e1b1c70d874ae77936e75b32deaf4e6711aad545135269cd1e6bc78ec4a7dae60ea4d3438210c9f0ff32f5feaa0f59f5
SSDEEP

192:KnL6KqyJKrgcHINxRgSzgyWxwiycCnxhWJmchG5T3CGG5T3CWeT337srDDbyl:AL9DgBwzHr8wiyjW0f3Cp3Cr33gXCl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b811be2c91053204b6acf5464f5c461

Files

2b811be2c91053204b6acf5464f5c461
.exe windows:4 windows x86 arch:x86

600fe8fac298d043778c82252c3b1bdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord595
ord631
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord578
ord100

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE