2eba88f40e9fc300e1606e1eda5fe24f59d3cfde790d56d9622aada70d6a7c46N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eba88f40e9fc300e1606e1eda5fe24f59d3cfde790d56d9622aada70d6a7c46N
Size

40KB
MD5

d7a37d27e5e407bae3bbae7560073880
SHA1

2046df93979f9e3cdda56cab2dead678969bde84
SHA256

2eba88f40e9fc300e1606e1eda5fe24f59d3cfde790d56d9622aada70d6a7c46
SHA512

f5d7dea1cf5a454d36f7a43cd95a2109c527157e221a42d2d6f99cb6e738e176853a017fe436d7aeeb0154e19e6b706488bc2a6c563de8d53c73581b9bc32e2c
SSDEEP

384:/J7U40be5fdJGSJ6aUAMlltLB6GFMan9FtFtFtDVyJZHqwIVICSJicdPhhWgW/A:/Jz0Qii6aU3JfR9HHHCqlcJXdZh9W/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eba88f40e9fc300e1606e1eda5fe24f59d3cfde790d56d9622aada70d6a7c46N

Files

2eba88f40e9fc300e1606e1eda5fe24f59d3cfde790d56d9622aada70d6a7c46N
.exe windows:4 windows x86 arch:x86

245032a982d56b01ab1b9ee9988f5fdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ