2ee1ee38e9fbacae0db5d75d4c9f3d00N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ee1ee38e9fbacae0db5d75d4c9f3d00N.exe
Size

64KB
MD5

2ee1ee38e9fbacae0db5d75d4c9f3d00
SHA1

20b1f54a4fec25cd03ce3b23352a99d428ff2b7e
SHA256

2c85d703a2068abf57ee83ddaf5f2f5d249d9202f7bf7bfa55fe0d407bb50a0d
SHA512

ea86c2f22d59d4551ee136d11f06747d83edcd3f6fa9b593555c6154f0f64ee71e5b22ed39c386685a046669fe33d112062b84728c04e339b6cdd5a5d15d0258
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrP:KeTqavEjDWpuhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ee1ee38e9fbacae0db5d75d4c9f3d00N.exe

Files

2ee1ee38e9fbacae0db5d75d4c9f3d00N.exe
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ