b2210cb28290b73627a0596d0a8fdd6b188916b609d0408f6a69351a300d8a0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2210cb28290b73627a0596d0a8fdd6b188916b609d0408f6a69351a300d8a0a
Size

197KB
MD5

ba9eb0d837e61c28668535e0263401e8
SHA1

6389fa266a0661f4d3ada125240dc45d5a6338b2
SHA256

b2210cb28290b73627a0596d0a8fdd6b188916b609d0408f6a69351a300d8a0a
SHA512

0b3c5646ad511dd4b0f980e89b3e4e65c067279bb175a4b07607612443c412922ab674a62d4dd71145fb2a5a4b1ac9952320a56088d92cd913b8ab224aa31b3e
SSDEEP

1536:BeNCn/HB8HMNYDBbZDeNCn/HB8irLjIpOMZekpO1Ek9qV:BeGOMNYPDeGRelka

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2210cb28290b73627a0596d0a8fdd6b188916b609d0408f6a69351a300d8a0a

Files

b2210cb28290b73627a0596d0a8fdd6b188916b609d0408f6a69351a300d8a0a
.exe windows:4 windows x86 arch:x86

1c1a4b4b4c223591342ce744d51f8329

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord587
MethCallEngine
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord537
ord648
ord681
ord100
ord579
ord616
ord617
ord618
ord580

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE