9bedcabf98b6146f3702aa0088fc505f41657ead107c4121e500995d84635018 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bedcabf98b6146f3702aa0088fc505f41657ead107c4121e500995d84635018
Size

80KB
MD5

62968f3521b869f6377d9ae5645a2550
SHA1

90c78d398bda3c1ef2816a45cefe833243df7d6c
SHA256

9bedcabf98b6146f3702aa0088fc505f41657ead107c4121e500995d84635018
SHA512

07476cf051c744d61d06e2f072f8ba33a84a22fdd54d0b36d4404d041cd18fafaeeff83806a9b8cfda4f4503d97db1c57c0166cc8eee1b449aee8a29db4759f4
SSDEEP

1536:yFAlA03oQR79O5GxBrqCKh9ohQMqvoPwd7HxSMnx:SaA03oW7BrqBUQMooIBHxSix

Score

N/A

Malware Config

Signatures

Files

9bedcabf98b6146f3702aa0088fc505f41657ead107c4121e500995d84635018
.exe windows x86

403e8c7b6baa944629c4c7ebe34705cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

kernel32

MulDiv

msvbvm60

ord183
ord584
ord669
EVENT_SINK_AddRef
ord562
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord538
ord570
ord575
ord100
ord432
ord543

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ