bb81715b73bef79a63594930dd6249f4e31805e6a307a98d64196afb410e83a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb81715b73bef79a63594930dd6249f4e31805e6a307a98d64196afb410e83a4
Size

72KB
MD5

68df0f033173abcf6699e83d49c0e620
SHA1

8fd09ba6205a3540c7687bc05aa2e65f1b8fab33
SHA256

bb81715b73bef79a63594930dd6249f4e31805e6a307a98d64196afb410e83a4
SHA512

2f67995f731a300bde40f5bc698d70b8a6a2d91f18ef0c28d668eda2967397ba1649ef758d58d86c7eea2a5e9170d0d1e22f8d94bc47a0bf144fb067ba0b4256
SSDEEP

768:xE72KlYgp8ItEYWYsz+jreH9dcw0S2nDZe1TSG9yxfT8:x3hXIUz+mcw04SG

Score

N/A

Malware Config

Signatures

Files

bb81715b73bef79a63594930dd6249f4e31805e6a307a98d64196afb410e83a4
.exe windows x86

67b4c1e135a654c409e8dfdc649e13ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowsHookExA
GetWindowLongA
UnhookWindowsHookEx
SetWindowLongA
CallWindowProcA

kernel32

GetProcAddress
RtlMoveMemory
GlobalFree
GetModuleHandleA
GetVersionExA
GlobalAlloc

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord626
ord519
ord667
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord593
ord594
ord595
ord520
ord709
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ord319
ProcCallEngine
ord537
ord644
ord648
ord573
EVENT_SINK2_AddRef
ord681
ord576
ord685
ord578
ord100
ord610
ord320
ord612
ord321
ord616
ord617
ord619
ord580
ord581

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ