0defc03ba935c824d8058f7de275336ed47a98f78a42b2c1b942a8c31dd42dcb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0defc03ba935c824d8058f7de275336ed47a98f78a42b2c1b942a8c31dd42dcb
Size

168KB
MD5

55ddae3367b2b34d449fcc89fbd47350
SHA1

3f2a2a7e6c9f1b54d45d6dcac14416e1b0c44218
SHA256

0defc03ba935c824d8058f7de275336ed47a98f78a42b2c1b942a8c31dd42dcb
SHA512

713130c82d714a1255cdac2d8483a4073f0527b3e87877e65d6ef310cd98e270bbfd21828c1cb29cde38338001014674dd40504ff486376f4acc3f34e9d7c429
SSDEEP

3072:o2txIccfpFq49iwgcEOJZD1iGNeYAtLO1ug9jfk16R3iuTlI:TtxIvfp39i/W11iGEYAtKug9pR3J2

Score

N/A

Malware Config

Signatures

Files

0defc03ba935c824d8058f7de275336ed47a98f78a42b2c1b942a8c31dd42dcb
.exe windows x86

de2b99ac71d6bcc710f42f695ebaafa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DeregisterEventSource

msvbvm60

ord183
ord584
ord587
ord594
EVENT_SINK_AddRef
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord570
ord571
ord100
ord614
ord432

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ