d6683195966bfbb9a1f1cf8d0fcdeb1aa55c7de70963bca503a910812857dd26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6683195966bfbb9a1f1cf8d0fcdeb1aa55c7de70963bca503a910812857dd26
Size

198KB
MD5

3da7172e928690123c32f443e5cc3d58
SHA1

602dd3478fa1085325443c3139e541cf7ee346cc
SHA256

d6683195966bfbb9a1f1cf8d0fcdeb1aa55c7de70963bca503a910812857dd26
SHA512

e0a045dacee8225d4835593944ec868350806633ab60a14c249d082de9e817d86c4e60142baed4dc77e24894cc6eca738877c7a065ae410f2658e2ddfd3b87dd
SSDEEP

3072:LIdcFLEdskgrt05bnwhVh6PTP4xoFco+hNVHm7uM1wg:kWjZ0xCVh6sAz+hNVc5

Score

N/A

Malware Config

Signatures

Files

d6683195966bfbb9a1f1cf8d0fcdeb1aa55c7de70963bca503a910812857dd26
.exe windows x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE