ebbda3663b3c387cf2d71bd800a81237593be89cc31da38720a152344a33bfe8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebbda3663b3c387cf2d71bd800a81237593be89cc31da38720a152344a33bfe8
Size

47KB
MD5

5b6f20a5e47fda3015e02b2372a01520
SHA1

95b59a1a4616265544f4347767472477e7caa1b6
SHA256

ebbda3663b3c387cf2d71bd800a81237593be89cc31da38720a152344a33bfe8
SHA512

9210a0cb518fc4da07244a55592bcaa789c2ca52eb86433c66737270ef2e69d317afdbc8e8a23bfa8ec4b1484352b786e48c9e56b8e11c1e60966c85055a980e
SSDEEP

768:Dk3AIRn0QfeW5Izoxrtr1J1wQb+Oyac/7k:DYAI10QfeW5IzorbPA

Score

N/A

Malware Config

Signatures

Files

ebbda3663b3c387cf2d71bd800a81237593be89cc31da38720a152344a33bfe8
.exe windows x86

290165b04326c6d8f6e12647e505addd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord588
ord696
ord697
ord698
MethCallEngine
ord513
ord661
ord558
ord598
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord678
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord714
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord573
ord681
ord100
ord616
ord617

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ