15d2c33a634605df01325fbb2fe56e89e06fc3d7bf72c9a2e0f7607778c36136 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15d2c33a634605df01325fbb2fe56e89e06fc3d7bf72c9a2e0f7607778c36136
Size

248KB
MD5

4e440a868d076ec26ed3689b365e68d0
SHA1

a5fba14d075ce8dfe7a154e4b92093602ee12f65
SHA256

15d2c33a634605df01325fbb2fe56e89e06fc3d7bf72c9a2e0f7607778c36136
SHA512

b2020900f3ba824196e3bbba1f1eb61a6ad30d4c6d5557e1831f4625651d8892794b45cf30b29d804b4817c09ef8e46d1c5ef8107227bb4cea8116b82c85ada4
SSDEEP

6144:3Jed1Wu2UpVezPqyqf0dRyAAEsp8q3IZJg8YxMrnmPkMM:3Jea0qyy6k7jJbrBMM

Score

N/A

Malware Config

Signatures

Files

15d2c33a634605df01325fbb2fe56e89e06fc3d7bf72c9a2e0f7607778c36136
.exe windows x86

27a30793aa12a2003951adb25dc3fe66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
ord629
__vbaSetSystemError
__vbaHresultCheckObj
ord663
_adj_fdiv_m32
ord593
ord594
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord525
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
ord676
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaI2Var
_CIlog
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord100
ord610
__vbaFpI4
_CIatan
__vbaStrMove
ord543
_allmul
ord651
_CItan
ord546
_CIexp
__vbaFreeStr
ord581

Sections

.text
Size: 208KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ