4e104368182524c8e107ade3376ef0ac7e930a10d9cc40570307499a55cee593 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e104368182524c8e107ade3376ef0ac7e930a10d9cc40570307499a55cee593
Size

672KB
MD5

5125641fe541c042b7a3b6767fb02598
SHA1

b539ac422197183437c009d14efda23fe72eeb0b
SHA256

4e104368182524c8e107ade3376ef0ac7e930a10d9cc40570307499a55cee593
SHA512

fed4245b6dd8f1dddd37c81af5d903851b3baf4dbae2ea18bda5bbb0012f00f9b598db2250a65ece071f3f3e5b2cb03ecb26d0dfd7e86c671861d24a4b58ccad
SSDEEP

12288:4NrNcSTFX2mNA+0hUrt0idn673b33FeokUwwwMMNoOrAAgQCmr:4NpnBJNAPhGtF6w7

Score

N/A

Malware Config

Signatures

Files

4e104368182524c8e107ade3376ef0ac7e930a10d9cc40570307499a55cee593
.exe windows x86

b6860646b0b0a9283bef87e72dcc85c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord573
ord100
ord616
ord617
ord650

Sections

.text
Size: 640KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ