b4def7956486d36428f9ba59d00a235039ca3b0d20dce14966e5ff8e149692ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4def7956486d36428f9ba59d00a235039ca3b0d20dce14966e5ff8e149692ec
Size

159KB
MD5

710dfc89f75e74c7de828b399e600bd0
SHA1

fefaba7de5793070e4508f02258d8752cb5e93a8
SHA256

b4def7956486d36428f9ba59d00a235039ca3b0d20dce14966e5ff8e149692ec
SHA512

a52a2eeb0599e702796764f61c9a4dae3d3cf0bb5dafe1510288c10880a0638c4754303f821bd4ce91257f4e3a3f08647307b583f97a020d0664473128b9e9c6
SSDEEP

3072:ln7k6yX0NjVslZsVeDLOyq0VNwnv4dmvor6AhC:SONje+efO12q4dWA8

Score

N/A

Malware Config

Signatures

Files

b4def7956486d36428f9ba59d00a235039ca3b0d20dce14966e5ff8e149692ec
.exe windows x86

c73990c71b6f008fc00f7f69779eb772

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord515
ord518
ord441
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ