799e63827e99ce5b2b02cb80a8417503a3917459da20c71b8ceb06f15be36270 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

799e63827e99ce5b2b02cb80a8417503a3917459da20c71b8ceb06f15be36270
Size

352KB
MD5

6f252ad45130401ee218c3b47c0e22f0
SHA1

d441758589c9b7e9961adbbbe6e51d1052dd4c0b
SHA256

799e63827e99ce5b2b02cb80a8417503a3917459da20c71b8ceb06f15be36270
SHA512

baf265ddc9915b6805f78027f23cc9062552cb7b6e7ee25aaa3be1a27fb33dc0b3ad55d21ef4a6853849b256b1592c0c40941a475aab65db4ff2d6a1173d3427
SSDEEP

6144:mkI1Nk3wT5u57lGfFqUBWb13cVdowsdN8++YH8SfzH8SfBsN:gAwVufG9XWbBcJv+3jKN

Score

N/A

Malware Config

Signatures

Files

799e63827e99ce5b2b02cb80a8417503a3917459da20c71b8ceb06f15be36270
.exe windows x86

d7721eee064cdcb6f4ddb8542dd1f3b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord667
_adj_fdiv_m16i
_adj_fdivr_m16i
ord521
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
ord568
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaDateStr
_adj_fprem
_adj_fdivr_m64
ord716
ord531
__vbaFPException
_CIlog
__vbaErrorOverflow
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord578
ord100
__vbaAryLock
__vbaLateMemCall
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ