e9257567e9252de92bb684baf68889cea44779cf7550d15737c66f74119b126d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9257567e9252de92bb684baf68889cea44779cf7550d15737c66f74119b126d
Size

74KB
MD5

5fd6629721048ace6699aadbaa06fbb0
SHA1

de9b254cac758bd08535d67e28c63dd302242904
SHA256

e9257567e9252de92bb684baf68889cea44779cf7550d15737c66f74119b126d
SHA512

9ff1d4ed1e5d9f7d8c27fb4f71a36ad723c4f4f863bf4e4c7fff5247b9dab0a09fd012ae37db0c26286dc4255a13c2ec865d74b6fc9c11c07046ebc7da418c57
SSDEEP

768:+LLJm/9BTClcALYUP1Dpx0pcTV6oIqCqtw2jOaly:mLYgcALDPdp6CCqtLy

Score

N/A

Malware Config

Signatures

Files

e9257567e9252de92bb684baf68889cea44779cf7550d15737c66f74119b126d
.exe windows x86

0964e2307f9d3cd9f829d5538c59e86f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAnyAccessesGranted

msvbvm60

ord183
ord695
ord698
MethCallEngine
ord518
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
ord677
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432
ord540

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ