5e1e794b310fbc3128443f0ca075a682d7bb6d34751bea68333fb4fa573dad23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e1e794b310fbc3128443f0ca075a682d7bb6d34751bea68333fb4fa573dad23
Size

176KB
MD5

6e137b9729e31bc23db727f89a784cb1
SHA1

1e7b557c5a552c35cd8b287d953eacaca7b44bf7
SHA256

5e1e794b310fbc3128443f0ca075a682d7bb6d34751bea68333fb4fa573dad23
SHA512

fd3f19d160525d948de55af6371e31cb5f2c9b0f2cba03a608a7305b288ccad47b25e69a1491b7eb09c64579996f46433f36a56f3f8d2e1f8793768d7608612e
SSDEEP

3072:+F8R6dVEaXNDJRY41fqJ8KPu9uI/8c5IyewWYqTadNaB+jIR58NX25F:+ddVEUDbSJuLkhye/CaBSu

Score

N/A

Malware Config

Signatures

Files

5e1e794b310fbc3128443f0ca075a682d7bb6d34751bea68333fb4fa573dad23
.exe windows x86

f0c55f4a5ebf47fc958070ae2653f3c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
FreeResource
LoadResource
SizeofResource
GetModuleHandleA
LoadLibraryA
LockResource
FindResourceA

msvbvm60

MethCallEngine
ord516
ord626
__vbaCopyBytes
ord666
ord667
ord669
ord593
ord595
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord100
ord616
ord617
ord580

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ