2f26a71ad80404af78f3b44a14f2ba51c79a6c6b0d475c7b4324c0aa527d3413 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f26a71ad80404af78f3b44a14f2ba51c79a6c6b0d475c7b4324c0aa527d3413
Size

72KB
MD5

405d2489897fc0551df24d1eac9c580f
SHA1

d299098c4cdf734a59e45fcf0ab1bb3ba55207d3
SHA256

2f26a71ad80404af78f3b44a14f2ba51c79a6c6b0d475c7b4324c0aa527d3413
SHA512

edc9387b4ba2aeea4442aa1eb452fb68a60d2b17824b21dd0f6a13bfa77f8347e60abdf3f076fdf24c635fc93282331a4eaecf81b753b4f0441672aa400e41f5
SSDEEP

384:y6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2s:ypQNwC3BEddsEqOt/hyJF+x3BEJwRrmf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f26a71ad80404af78f3b44a14f2ba51c79a6c6b0d475c7b4324c0aa527d3413

Files

2f26a71ad80404af78f3b44a14f2ba51c79a6c6b0d475c7b4324c0aa527d3413
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ