5136671ff418081a56adf9989d2f0e96de01308b857486f2b7c74fdffb04639f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5136671ff418081a56adf9989d2f0e96de01308b857486f2b7c74fdffb04639f
Size

268KB
MD5

532ecb41e0862c009599fab269bb3be0
SHA1

d0cde5bc68b1fd70939db09ee3da9e0e1e1226b2
SHA256

5136671ff418081a56adf9989d2f0e96de01308b857486f2b7c74fdffb04639f
SHA512

c5bc6f32e80fe08e5418be83b35cc82c843ffd25559755cf0e19dbf85c7291bf45f830c38bfe24b6524c6c072dd1d1ca96e46e59ee50ddceefa6b1b947ce1409
SSDEEP

6144:0sIotq23DepjEEe4DP5y1W0H0JJvZ0rzvTb+upWVS:07aKynsynHyJhWpaS

Score

N/A

Malware Config

Signatures

Files

5136671ff418081a56adf9989d2f0e96de01308b857486f2b7c74fdffb04639f
.exe windows x86

fb33400ff18dc79fe0f8b193831284cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ