02fa99bf2391285e3564c2153fc0c0f2b15d887cfb0f4950c2fffd5081e5afeb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02fa99bf2391285e3564c2153fc0c0f2b15d887cfb0f4950c2fffd5081e5afeb
Size

88KB
MD5

01be52ed03c0763ed31baa7504f5435a
SHA1

e2cfbe5ba22b3c2249a6c24c20ad86b6be0ab512
SHA256

02fa99bf2391285e3564c2153fc0c0f2b15d887cfb0f4950c2fffd5081e5afeb
SHA512

4198175be118e2ed11ee7f838eefc26daf4f37251b212037318d726613c2e2c368fd46702004e072d54a447aefb17eda1af71efedf2051b713119185e6269c17
SSDEEP

1536:0VnFjmcOAIEKyG3iEoWTb4cQH3GmIdvA7p/hAsB97NEvA5x7aFa:gnFbO7vyG3aUdvU/h7ja40a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02fa99bf2391285e3564c2153fc0c0f2b15d887cfb0f4950c2fffd5081e5afeb

Files

02fa99bf2391285e3564c2153fc0c0f2b15d887cfb0f4950c2fffd5081e5afeb
.exe windows:4 windows x86 arch:x86

758e1ca99b733feddab6cf279f1185d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord616

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ