211e0b52916f1b5974dbd10dba0246737e4dc2cfb86a430bc7c7bf0b7e5d2992 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

211e0b52916f1b5974dbd10dba0246737e4dc2cfb86a430bc7c7bf0b7e5d2992
Size

1.2MB
MD5

fb42041be32cfd1c5ccb89aae5f29aa3
SHA1

73b4c79bc67e6720624a034276985e377e9832c0
SHA256

211e0b52916f1b5974dbd10dba0246737e4dc2cfb86a430bc7c7bf0b7e5d2992
SHA512

1bccb0b1cf00bae2427d09041cc717ec48a344eae43e85074a5a49c58ab7c41a28cbecbde13508ee8c041aae5e41514951708085cca36d70782b957e073bde84
SSDEEP

24576:dwE5sGWPvkOwxIPQhICgBnn0FKuL3LUsLKZqiaN+n6NI:uMNIPQhICmZAhKZqi6NI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
211e0b52916f1b5974dbd10dba0246737e4dc2cfb86a430bc7c7bf0b7e5d2992

Files

211e0b52916f1b5974dbd10dba0246737e4dc2cfb86a430bc7c7bf0b7e5d2992
.exe windows:4 windows x86 arch:x86

3af224d0a2edd8780906705e69af5c50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord698
MethCallEngine
ord666
ord592
ord595
ord303
ord522
ord309
ord524
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
ord567
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord716
ord717
ProcCallEngine
ord645
ord570
ord648
ord577
ord685
ord100
ord579
ord613
ord617
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yt
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE