2fe6d7060e6575f988dea5a2cfbea657635f331dc3a798b40b0462d5e0031a11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fe6d7060e6575f988dea5a2cfbea657635f331dc3a798b40b0462d5e0031a11
Size

40KB
MD5

11760d5a9e2865d9b002f843b62acf21
SHA1

820d54531f3fc70bac182839f106aa69f85f1d36
SHA256

2fe6d7060e6575f988dea5a2cfbea657635f331dc3a798b40b0462d5e0031a11
SHA512

7e6992760d9c4981312e52c67cb030f55e4cef5be51039a3db3a6fb5296f9f077249c3f9ea78bf4150f75799bf7b7400064e0f267a02483eaecd88f4835be2ca
SSDEEP

768:1m/QojCpHfx0jk6SLZRI+WE6F2UzpHjhm8f10+aZ:EQoj25LLI+W5ljA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fe6d7060e6575f988dea5a2cfbea657635f331dc3a798b40b0462d5e0031a11

Files

2fe6d7060e6575f988dea5a2cfbea657635f331dc3a798b40b0462d5e0031a11
.exe windows:4 windows x86 arch:x86

96e57d09efd03a48c83f1349e435734e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ