e2b1ef293a30e4e71592e21b533c8944[.]zip | Triage

Sharing

General

Target

e2b1ef293a30e4e71592e21b533c8944.zip
Size

81KB
MD5

d68dd19850f3f5ea9497845352f298cd
SHA1

8fc69aec993aad5aaa56b19457811a706249ace1
SHA256

bf53dbce9076a40e33ea6a8b42f1b721ae42e77a07484aad7c775f94143479ae
SHA512

82ecbf318fddb3e2f9def3489bfc0072b6dc2e3a367f7ae3f5f4abb8d0e045237d641c212e8fcec6f00406b11343865d29139a6ec51f746a4f0bcbeaf67d82fc
SSDEEP

1536:atSDRlTCy+bPqWbMsaJGEWnSbzX+C4lddK/Um7UV2V7LtR6ipmkhMKj:atStybjbMfMPYzX6lvK/Um7UIV7LT6i7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6f0e47a2a6a288b2e8afd1accadb3c0394ccb09ac0b9992398499038acdf12d1

Files

e2b1ef293a30e4e71592e21b533c8944.zip
.zip

Password: infected
6f0e47a2a6a288b2e8afd1accadb3c0394ccb09ac0b9992398499038acdf12d1
.exe windows:4 windows x86 arch:x86

Password: infected

96e57d09efd03a48c83f1349e435734e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ