fa37a78907ed7167a15b395d9485e9948118957170a55592c9d69cd14eef482b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa37a78907ed7167a15b395d9485e9948118957170a55592c9d69cd14eef482b
Size

54KB
MD5

6ccb14715bc5e9a36a007fcaa00afb06
SHA1

385d59b9deb67ae9d72c1c94f2d9aaaf667fc90b
SHA256

fa37a78907ed7167a15b395d9485e9948118957170a55592c9d69cd14eef482b
SHA512

6b52fc93657e05955f2dd03d8b996aade337cd7febf01b7a2062d9effe6b63392cd79692974539daf406630d9e076eb01b34d8e346edda7d8aafcaa7630e662a
SSDEEP

768:PPpjSq2sYbfDWjXDXr8eGEOYQe5FBxOV5UPigcFIW:PPpjSJsYnWbDXge3FBxqOaTIW

Score

N/A

Malware Config

Signatures

Files

fa37a78907ed7167a15b395d9485e9948118957170a55592c9d69cd14eef482b
.exe windows x86

a5acea45e08422979d28768e66446d16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ContinueDebugEvent

msvbvm60

ord183
ord697
ord698
MethCallEngine
ord552
ord598
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord562
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord573
ord681
ord100
ord616
ord545

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ