b820a11e3f89430512410852a32f832ac7566e85b094115ca454218c5c31ea93 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b820a11e3f89430512410852a32f832ac7566e85b094115ca454218c5c31ea93
Size

74KB
MD5

68ec8225bb4486cc906ea81b08dda250
SHA1

48ccb640046ff8a6ac60805218c4c3fe1ac77b7f
SHA256

b820a11e3f89430512410852a32f832ac7566e85b094115ca454218c5c31ea93
SHA512

05c191d24804751a85c67d59d6323230bb29a5538e6e271542df24c800a174f5ac803f3a3edced0fe1700d6aaa021d82d7a551ed3a54864f582f0d7da75fe33c
SSDEEP

768:zLLJKg/rBVxBuVtOoCrIXo6BjZDpx0pcTV6oI+DibJKRRmWNO:vLEg/4tOoCZ6B1p6GDioRR/O

Score

N/A

Malware Config

Signatures

Files

b820a11e3f89430512410852a32f832ac7566e85b094115ca454218c5c31ea93
.exe windows x86

6384e81459d9316fcb0e41873c1ca2f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAnyAccessesGranted

msvbvm60

ord183
ord589
ord698
MethCallEngine
ord518
ord558
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord562
DllFunctionCall
ord563
ord678
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ