c2224cfac9a62aac159e646e06ef3c01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2224cfac9a62aac159e646e06ef3c01
Size

108KB
MD5

c2224cfac9a62aac159e646e06ef3c01
SHA1

3a1256a704d6241ee8b928e811a08f55c4e0c6ea
SHA256

47c703c33cd79fb73271604e658a17ae3d2e62c2a4716d27b8c6c769039b234d
SHA512

9eab99011d7dbb6a3d6e5a007808db9dcfa401eb533b218c158cc8a029e441a1aac16b2550aa12736b85a77b882d16b95245eaebba126906660da41d91ffa797
SSDEEP

1536:PkFJXgb4ESAenF6Jf0oRUOn/W0Fvwgd7BKUalBMIxP32:cXgUYJf0gn1Fvwg9BsBTP32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2224cfac9a62aac159e646e06ef3c01

Files

c2224cfac9a62aac159e646e06ef3c01
.exe windows:4 windows x86 arch:x86

3697944a64a62226d23da3306d9467c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

thumbs .db

MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

. data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE