e2b486c15ff2b64572a48942612a7418978a46791ee90f8251644896d3cfe902 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2b486c15ff2b64572a48942612a7418978a46791ee90f8251644896d3cfe902
Size

76KB
MD5

45d49634ff37965843846b242361d130
SHA1

64247d1380929bad6bc72691c3a3fd7ae7c30f02
SHA256

e2b486c15ff2b64572a48942612a7418978a46791ee90f8251644896d3cfe902
SHA512

071af24a1e637426cea94df9565065bde806111d5eed19358e423c01af4deeed49983a779fe9f5bf6c0e14b2b8b8256b86c6fcb0a252bf67ec67a1993e678d2b
SSDEEP

768:YrSdTw+/08wFHPBRY/GtFmANEKVKg3Bz4CHl/4EdKXy8BO9ow:YrSdZeiANESKgxUqZYBO91

Score

N/A

Malware Config

Signatures

Files

e2b486c15ff2b64572a48942612a7418978a46791ee90f8251644896d3cfe902
.exe windows x86

a4f69a72b09a390cc9abde83d395bdc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

lz32

LZInit

msvbvm60

ord183
ord585
ord697
ord698
MethCallEngine
ord519
ord598
ord703
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord675
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord573
ord681
ord100
ord616
ord617

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ