b4643ee0d3e6eddecce61be9731d0c178312b6660855ef4bc914dfd9bd8cf5a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4643ee0d3e6eddecce61be9731d0c178312b6660855ef4bc914dfd9bd8cf5a6
Size

32KB
MD5

7a235644d06916180392138e46676004
SHA1

3d981e908eb9c06c4464d03f1d4d8cda5c8a3ff5
SHA256

b4643ee0d3e6eddecce61be9731d0c178312b6660855ef4bc914dfd9bd8cf5a6
SHA512

08d7192012b5958bc5387b78f8c5fdf0e7e4d75f0ce926e33f40a2c9106ced8fb438a9b54c6435e8d5338c04cd2ba0edcc562a04ab7711df8ddf3c37af677f12
SSDEEP

384:rE2gamLcY+ZBXdvnSv+lclSO7ggLHn/QWNsfglcw7WVOkeLE7ah0td:Q2g0RcYO7ggb5N8gVyJeLsD

Score

N/A

Malware Config

Signatures

Files

b4643ee0d3e6eddecce61be9731d0c178312b6660855ef4bc914dfd9bd8cf5a6
.exe windows x86

85b5be6de10925a5d5d895593a08c4b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ