d1f894161521e410591db7de93c16858bc1bb676b88e0e1e9ced35c99d6ec3c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1f894161521e410591db7de93c16858bc1bb676b88e0e1e9ced35c99d6ec3c3
Size

33KB
MD5

66903560912e6dfa3162cf92daa4e9f0
SHA1

6f66fcc68d0913ec61d6c92ea8f6be0de5335ecd
SHA256

d1f894161521e410591db7de93c16858bc1bb676b88e0e1e9ced35c99d6ec3c3
SHA512

d1968fd079d278a7ad73e2c48bf4aacd12fe48e81f0e1886fdb69c8823aaba52c5e53bbe008cbc973b1f6a35dfb562ca162c7f50eba315a75b6d778a9e680c61
SSDEEP

384:ZqdIquqvhdVRmRpUgqsJGE2bh0nCWSynIxLT6aXLA0JvOfEdS4EJThU:gdIquqrVWWsCbkIL+mAe4EkjJ+

Score

N/A

Malware Config

Signatures

Files

d1f894161521e410591db7de93c16858bc1bb676b88e0e1e9ced35c99d6ec3c3
.exe windows x86

7b8533dde9bdf189fd2826c72bd1ce23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord697
ord698
MethCallEngine
ord516
ord519
ord556
ord598
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord671
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord572
ord681
ord100
ord616
ord617

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ