2ab9dadcbf35abb5dd869b3ef1704d49 | Triage

Sharing

General

Target

2ab9dadcbf35abb5dd869b3ef1704d49
Size

448KB
MD5

2ab9dadcbf35abb5dd869b3ef1704d49
SHA1

310366bf0779b8a7f39045f9378d2506c514d940
SHA256

2c25d9c17c1928b6fb0efe41cb60e0d04311244d99c7d4db8504a4c6621312aa
SHA512

42fe592f4aed3dde2159f2b9f1bf5b590d5592d6267a69fd92515d41f236c0c2602f48fd3fb8fc9208a99413e593126bab21b90bf76d6ccb462b71ba131eeaf3
SSDEEP

12288:87ba/mX3cibNYhVknjpOl/JZLb8365/xirhJl2BDk9+u:qa7IIije/J1irhJoBg9z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab9dadcbf35abb5dd869b3ef1704d49

Files

2ab9dadcbf35abb5dd869b3ef1704d49
.exe windows:4 windows x86 arch:x86

c77b30ebf729db2e66e4b84fe226568c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord558
ord595
ord598
ord520
ord523
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ord534
ProcCallEngine
ord535
ord536
ord537
ord645
ord570
ord571
ord685
ord578
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ