2d8abdbb573642f8cd31e1d7a6c85e24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d8abdbb573642f8cd31e1d7a6c85e24
Size

24KB
MD5

2d8abdbb573642f8cd31e1d7a6c85e24
SHA1

5a5d4a5b8f84b17610dd0a9780ada8f5953ac212
SHA256

87f15f0a98600bf181018e45e15d2f4a22df1a425b8b99f5398b9fc85096966e
SHA512

4d68eeae9e70092dc40b295ea58fb93ede7c174ddd2018fae26ea70c38380a631163345c2b00c96a06af251c45cdf49e4caa4cac9abcdfd5c661279b33fafabf
SSDEEP

384:BiL5flZ1M5UkMb+7UW5tOwEpSAdTkLQ+z4a2jYSWykqOsBTw:BiLBlQukMhwEpSAdTkLQ+EkSWyZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d8abdbb573642f8cd31e1d7a6c85e24

Files

2d8abdbb573642f8cd31e1d7a6c85e24
.exe windows:4 windows x86 arch:x86

3af0b23fcb3c1a24fa627987521a576c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord552
ord553
ord593
ord594
ord595
ord598
ord709
ord632
ord526
ord528
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord713
ord607
ord608
ProcCallEngine
ord645
ord570
ord685
ord100
ord617
ord619
ord542
ord543
ord650
ord544
ord545
ord547
ord580

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ