b1d0e33bb6cf4d43aae0237f6c50f0ca187f09402587874447f37194ff189e54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1d0e33bb6cf4d43aae0237f6c50f0ca187f09402587874447f37194ff189e54
Size

260KB
MD5

d7d08e1dd2fff1b1ea8bc26d698f9110
SHA1

063c1f4b70535ba484e4d580d7e3d8bff9a50739
SHA256

b1d0e33bb6cf4d43aae0237f6c50f0ca187f09402587874447f37194ff189e54
SHA512

ecc12f791dc66ba3f1b3bae6196214133b1f7dde0b2a4a8618645280d8d8de01ff2133b1b38b7785947234202c4422e28fdeb3a6effa781495fdd5d7d1937486
SSDEEP

3072:hCBw+8aJO7H/LGtj8Ua0+YCtCK1XoX3vYD6:hCBw+VO7fsfawCtCK1ND

Score

N/A

Malware Config

Signatures

Files

b1d0e33bb6cf4d43aae0237f6c50f0ca187f09402587874447f37194ff189e54
.exe windows x86

8848d70c14da4bbc133cfdfeb991c195

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord697
MethCallEngine
ord516
ord517
ord518
ord626
ord519
ord666
ord667
ord591
ord593
ord594
ord595
ord598
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord567
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord531
ord716
ord717
ProcCallEngine
ord535
ord536
ord537
ord645
ord648
ord570
ord572
ord681
ord100
ord579
ord616
ord617
ord618
ord619
ord580

Sections

.bss
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE