804696bb0817610d428582d50292aebb32c5526814cf7f378dd8055d063e50ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

804696bb0817610d428582d50292aebb32c5526814cf7f378dd8055d063e50ce
Size

28KB
MD5

3029cb0d76402a4d95dc43a831bc62cc
SHA1

2860fe89d538cfe7a41da91760659432d4f35d2b
SHA256

804696bb0817610d428582d50292aebb32c5526814cf7f378dd8055d063e50ce
SHA512

71c53aa0f890d2cf6a040f49559916ffd7c4f0dd442a2ca49ebc618ea0f8aa1b08b7c59554a859e663bcae7671cb12b9380f66a69f6789b0c5f6e92164935cb5
SSDEEP

384:2tbyB8KnU3v8DrkqI15NDLO3Y2uL8UX84dZewq3WiWxs:2Xn3v8DrpIPFL/Jhii

Score

N/A

Malware Config

Signatures

Files

804696bb0817610d428582d50292aebb32c5526814cf7f378dd8055d063e50ce
.exe windows x86

3cb6b333b35fbcececebfcd991b96cd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord665
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord648
ord570
ord578
ord685
ord100

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ