1cbd2989250c58a7faa834489e272f384a3adedbc2e53ba8c86ec758847ff1f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cbd2989250c58a7faa834489e272f384a3adedbc2e53ba8c86ec758847ff1f5
Size

40KB
MD5

42ca122359319072eaa1ac3dad85db90
SHA1

cff2044ab27d56d68acbd1410db788357937c16e
SHA256

1cbd2989250c58a7faa834489e272f384a3adedbc2e53ba8c86ec758847ff1f5
SHA512

2b2fd5822d2578b6f0ad813b0ee022df087347279f084c2657a69ba7f8f8a8985f99cae29763ab96ab5e219af2e591709d86c877484ee6a14a4feb085e0f708b
SSDEEP

384:EZen7vG0j/OVcvTXCAqY/DJDRsWgaxRQwEYgOgaP4axLMa0TH+ihZunLO7oNAn:wLQGVcvTxLtRY9wEdOgaWPJga7oNA

Score

N/A

Malware Config

Signatures

Files

1cbd2989250c58a7faa834489e272f384a3adedbc2e53ba8c86ec758847ff1f5
.exe windows x86

47f373a503d00d1e022c513c9fa26630

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DeregisterEventSource

msvbvm60

ord183
ord663
ord669
ord592
DllFunctionCall
ord563
ord670
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord570
ord649
ord100
ord432

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ