c05838e81b5da890d85be01fdf261c2181a65008f86912cc8ce4343ff7ff14a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c05838e81b5da890d85be01fdf261c2181a65008f86912cc8ce4343ff7ff14a7
Size

36KB
MD5

55ba556974d9c501a907897102136bb0
SHA1

e35ee9b015df7f0a91f8cbe27da236bf22264a53
SHA256

c05838e81b5da890d85be01fdf261c2181a65008f86912cc8ce4343ff7ff14a7
SHA512

c62fd44e8db040f3959882e781c7f010f7d73d1a49d2609a9e55f59fc9fbe852218b7fd84ef669cbfc5fb566824411ef679c83ee06dbff9d5d933367e14791d8
SSDEEP

384:o4D1am5mal9MdqVCA+/BJ9xLDuN1aZuD/q2nb0ZP+kFdW9+4L7WWW0cJErCq1kiq:JDlYqVd+/BH0n9nbqLw+lJYCyZI

Score

N/A

Malware Config

Signatures

Files

c05838e81b5da890d85be01fdf261c2181a65008f86912cc8ce4343ff7ff14a7
.exe windows x86

01d2bd638f0a976b01a69b7fb5b85b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

kernel32

MulDiv

msvbvm60

ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ