9be15fe0165193e134f136b641a652a8dfb35b04e15bc3cf5e9aee5b5ea1b183 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9be15fe0165193e134f136b641a652a8dfb35b04e15bc3cf5e9aee5b5ea1b183
Size

60KB
MD5

665dc962036d3d1380ba252a1957d2d5
SHA1

f6092a1acf8bb425f2ce8358801ae0f58636534c
SHA256

9be15fe0165193e134f136b641a652a8dfb35b04e15bc3cf5e9aee5b5ea1b183
SHA512

95cc1043cc6ff28214e5fe603225179ccf9a53bec24746e130fe6607b016a43d4ac0b8863f672dcb8687fe17503795ac06c1e87a3f1fd6e27e7547f1fbf1c975
SSDEEP

384:B0uZ1cRYPA+SXqZMj0mqxVCXeDbqeQIv1+neEH9yStzkJyvWKUMcX9RQMSf7m78F:B0uZqR6AtryuO1+lHI61Zi9R9UbW4R

Score

N/A

Malware Config

Signatures

Files

9be15fe0165193e134f136b641a652a8dfb35b04e15bc3cf5e9aee5b5ea1b183
.exe windows x86

58122408e3fa79c250bd3d4f17cc7525

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowsHookExA
GetWindowLongA
UnhookWindowsHookEx
SetWindowLongA
CallWindowProcA

kernel32

GetProcAddress
RtlMoveMemory
GlobalFree
GetModuleHandleA
GetVersionExA
GlobalAlloc

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord519
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord593
ord594
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord608
ord716
ord319
ProcCallEngine
ord537
ord644
ord570
EVENT_SINK2_AddRef
ord681
ord576
ord578
ord100
ord610
ord320
ord612
ord321
ord616
ord617
ord618
ord619
ord546
ord580
ord581

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ