ebcb183bd229b41a6f8df8e494bf8741a4c8943c3c59c21c45898755bb6cdecc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebcb183bd229b41a6f8df8e494bf8741a4c8943c3c59c21c45898755bb6cdecc
Size

60KB
MD5

72c3225d5db8a0806a0cc4b53925b430
SHA1

bfd06bb7004b29dadc8c6b7c19d11344ad6f2c25
SHA256

ebcb183bd229b41a6f8df8e494bf8741a4c8943c3c59c21c45898755bb6cdecc
SHA512

935cf90ff8779828d6dcfb077191fc7bd81ecdaaaa35d8317a0a8ee509112ed3fd59cf08b7b86f0bd3df1f12855062d5215e6e996708835d1a4b369c87d59ef6
SSDEEP

1536:SN75U1sjhdBmcY4koM8wEetlv/s4DQ+6CrMoat5+:275Vc4U68j

Score

N/A

Malware Config

Signatures

Files

ebcb183bd229b41a6f8df8e494bf8741a4c8943c3c59c21c45898755bb6cdecc
.exe windows x86

e49570507bc0b5ca689c38d9c73252dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

lz32

LZClose

msvbvm60

ord524
ord633
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord430
ord617
ord543

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ