0537f0903a4fd2559d8f796c37d43595a1847683134734e97654be7e7cefa1c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0537f0903a4fd2559d8f796c37d43595a1847683134734e97654be7e7cefa1c9
Size

20KB
MD5

6f980d01503dbec13673c13528c4e0d0
SHA1

fd601aaf07654417db4d219548a933c741681ff7
SHA256

0537f0903a4fd2559d8f796c37d43595a1847683134734e97654be7e7cefa1c9
SHA512

1803df4f1570c08a26b06ad1499dfe1143ecb160f0db1d5a28923d65366650a756c120aff30fa9f833087cb7e1b40c1c1faf6d81d53512c728d8687f74619b2b
SSDEEP

192:i56U6BL4v7w2lovAC13vaYT9AVLAj/hj3CRc9/s:aBiL+7wRv7vpEcT/s

Score

N/A

Malware Config

Signatures

Files

0537f0903a4fd2559d8f796c37d43595a1847683134734e97654be7e7cefa1c9
.exe windows x86

1e1f6c265bd378fd4c7c7ae56cc7c825

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord648
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ