21e5b9c61030d6660ec58c22db52678413e5ed70ecd8064cd4293e4d6601fcd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21e5b9c61030d6660ec58c22db52678413e5ed70ecd8064cd4293e4d6601fcd4
Size

74KB
MD5

6b6000800eac14333087924bff197b20
SHA1

b6050f67dca76e3cfb04697c7d405eb353e6bbd0
SHA256

21e5b9c61030d6660ec58c22db52678413e5ed70ecd8064cd4293e4d6601fcd4
SHA512

5187df5a97f02a35a01c7389b46fae99b928f8d4b448c2ea75e10d441438d2c6d25865df9937c026d35e9c3aab4f04accb06dc856cdd5ad53ffa8cc4ac4eb096
SSDEEP

768:+LLJmKBTClcALYUP1Dpx0pcTV6oIqCOtw2jOalc:mLY/cALDPdp6CCOtLc

Score

N/A

Malware Config

Signatures

Files

21e5b9c61030d6660ec58c22db52678413e5ed70ecd8064cd4293e4d6601fcd4
.exe windows x86

0964e2307f9d3cd9f829d5538c59e86f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAnyAccessesGranted

msvbvm60

ord183
ord695
ord698
MethCallEngine
ord518
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
ord677
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432
ord540

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ