8144706200[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

8144706200.zip
Size

540KB
MD5

ec52d32a4f4307f524a40498af47e6a9
SHA1

d0ab5c676e6ff0e35b4f62191758ba72ba41541e
SHA256

acb1bf20734dacee21574dead139cdf5dfa7dcb6750b7487b7735a26ba52d552
SHA512

f8f2ab81c7bbbd6f9a00c0eef6737c217078520b756d9605e1a0fb684912513f0d65c5fae2826b70773ab451eea9e6b4d04ddf0464e5ccbb4ee676d122fcd654
SSDEEP

12288:FMYL1+YB9emOg18i6YZXb1D5pGjHp3a2IErSNLgIBBB6ZyCY0A:FM+1+Ibp8OX51gHp3a21QbwZyMA

Score

N/A

Malware Config

Signatures

Files

8144706200.zip
.zip

Password: infected
0098fc70a8aca94b822ccca160808a645be68c9cef3b91f5ee8e45fade92eda2
.exe windows x86

d824cc21730adf8687565bc93983e392

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord648
ord576
ord685
ord578
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0400947c780391e29c20f7ce7ecd8ae7baaedc9489042897e66f3f07db645b3d
.exe windows x86

e1bec2b03d010303a8de7159534e8831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord660
ord520
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord531
ord716
ProcCallEngine
ord535
ord644
ord645
ord572
ord578
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yfeipyp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
077d9f3a7c61325255994689ef293108ad2e1845d498db2eb8a4c289f8631f91
.exe windows x86

5abb44c656012a2c2c6a6c563aee7a72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord584
ord516
ord660
ord593
ord520
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord608
ord716
ProcCallEngine
ord535
ord644
ord572
ord573
ord575
ord100
ord617
ord546
ord581

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
112809485bd6a49d2b24ffb713d028be6e0911a9b0e8bcb72d57916245d6c579
.exe windows x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
15e8083c74d5e04fc68950c4b1c8cc6ba6f535ae5f4b23d2b8c1b40fb2709db7
.exe windows x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1ec099e2b1f3aece00fbc48d190cea5e7e5f9d4bf7ab180867254bd7bd0911c9
.exe windows x86

d79fc7491e273c3e68e96b0174b2ca0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord716
ord717
ProcCallEngine
ord648
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
239e4fda8957039e6a0fdcd90b9ec6882cb575980839d377ba874f2c7482c7c1
.exe windows x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
27c482cd22f27ecb2ad218888b4fccc22aad99c7eb839348c2f2f6c8d3ac5410
.exe windows x86

35ec3b5ba345293d9198ffb362e95d6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord648
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
408bb694275f735f2d07b3bb11f5534e44b6c1d7364fb59dc676d302eb6a6cde
.exe windows x86

35ec3b5ba345293d9198ffb362e95d6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord648
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
46f253bef456e919f94a07c522f43be23516484caf33062cdfe5e0ac370e037f
.exe windows x86

35ec3b5ba345293d9198ffb362e95d6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord648
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
4e38a5c91bd98da846ff9e6686103ad9a60c12f74e982dbe83d996253069cc9f
.exe windows x86

3357376d2e8aa399485e5d9e5db8a13d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord660
ord593
ord520
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord608
ord716
ProcCallEngine
ord535
ord644
ord572
ord573
ord575
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
5a22ddd3cb71331870372b2915a83e950c34896cd69e4b137bcde685886e18e9
.exe windows x86

35ec3b5ba345293d9198ffb362e95d6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord648
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
64f4d38e7b3350bd2e7919a5b2bd12ac06394754a97946353701405ccfbe8c7a
.exe windows x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6dd2f4a3ba2b0d0cde72ddb9e86481968c0f297e2574e6ca7c675f638aa1ee30
.exe windows x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
71ced68db169de067c50285d9ef1bf115a73bf0ce11120ba5b9fa30a101db767
.exe windows x86

9b246d58c962f2d59f1859aa14fdd178

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord598
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord535
ord645
ord648
ord578
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
84f8ce12f56d9500a1edc8c31af51f20f971081b9ae0db896df31e118de4747c
.exe windows x86

35ec3b5ba345293d9198ffb362e95d6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord648
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
87f85c87c62f84baf48068af827508f82b857286aaae24e67ae0f7eb741c7b54
.exe windows x86

d824cc21730adf8687565bc93983e392

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord648
ord576
ord685
ord578
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
a8243a4f0c2be37f628d076bc2ae6410c31dfe9dcedf6f6b64b93775598c2f2c
.exe windows x86

491a66f547de05a00efd18196267529d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord660
ord520
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord716
ProcCallEngine
ord535
ord644
ord645
ord572
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ace63b0452b1e713f5e8984fd1594019334fedba156ef7fd99fc3edfd3fd5601
.exe windows x86

491a66f547de05a00efd18196267529d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord660
ord520
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord716
ProcCallEngine
ord535
ord644
ord645
ord572
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b32bc3a76c17d6b33c02ac8b4761b38787196466764e0d4391dab9f5b7f46787
.exe windows x86

b74a785cdbfc99e7264c992bc74a292f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord660
ord520
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord713
ord608
ord716
ProcCallEngine
ord535
ord644
ord572
ord575
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
b5ee90d72df1846c6b4259db08c0bafe7785f313d5f714814af404503bf1e930
.exe windows x86

e1bec2b03d010303a8de7159534e8831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord660
ord520
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord531
ord716
ProcCallEngine
ord535
ord644
ord645
ord572
ord578
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cad1441096365ed25bf5e196d4b3d0a4702c77ad8606b008326f6b4afdcbbaef
.exe windows x86

3357376d2e8aa399485e5d9e5db8a13d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord660
ord593
ord520
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord608
ord716
ProcCallEngine
ord535
ord644
ord572
ord573
ord575
ord100
ord617
ord546
ord581

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cf13ce6e26110b83dd3421875fd248fdc55e39320bb7a4f993197a37d9d52077
.exe windows x86

3357376d2e8aa399485e5d9e5db8a13d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord660
ord593
ord520
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord608
ord716
ProcCallEngine
ord535
ord644
ord572
ord573
ord575
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
d715b7bade43c7e3fc0947c33f2fca7203ada912df599100c17b370bd63b19af
.exe windows x86

40b67501f3a50ffb452c5ce42fa8a718

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord660
ord520
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord713
ord608
ord531
ord716
ProcCallEngine
ord535
ord644
ord572
ord575
ord100
ord617
ord546
ord581

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
f2bc9efbee9921f63162448f068309b31e1233b60f6edd7777ba99404038573f
.exe windows x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f506ef7bdaaf472236d9d5500a3fc773868c06ce70ba5fceb96a98719b79ad67
.exe windows x86

35ec3b5ba345293d9198ffb362e95d6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord666
ord593
ord594
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord531
ord716
ord717
ProcCallEngine
ord648
ord576
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
f77f03b0272c6996c444149904586ba5c6ba7a292246bd1677ee05cc465c7c3e
.exe windows x86

dc3747453dc56d91ea0b64b149e3cbb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord660
ord520
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord608
ord531
ProcCallEngine
ord535
ord644
ord645
ord572
ord573
ord575
ord100
ord617
ord546
ord581

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fb1948ac1bd9adb3eface33b1297395f68a51c9f4146715640822b6e991e8fb7
.exe windows x86

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord717
ProcCallEngine
ord645
ord648
ord576
ord578
ord100
ord617
ord619
ord580
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

d824cc21730adf8687565bc93983e392

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 28KB - Virtual size: 25KB

.data Size: - Virtual size: 5KB

.rsrc Size: 100KB - Virtual size: 132KB

e1bec2b03d010303a8de7159534e8831

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: - Virtual size: 1KB

.rsrc Size: 128KB - Virtual size: 128KB

yfeipyp Size: - Virtual size: 4KB

5abb44c656012a2c2c6a6c563aee7a72

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 36KB - Virtual size: 34KB

.data Size: - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 32KB - Virtual size: 29KB

.data Size: - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 4KB

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 32KB - Virtual size: 29KB

.data Size: - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 2KB

d79fc7491e273c3e68e96b0174b2ca0d

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 32KB - Virtual size: 28KB

.data Size: - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 72KB

febf81820a6edbb14fcc9855df23f315

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 32KB - Virtual size: 29KB

.data Size: - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 72KB

35ec3b5ba345293d9198ffb362e95d6f

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 32KB - Virtual size: 29KB

.data Size: - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 1KB

35ec3b5ba345293d9198ffb362e95d6f

.text
Size: 28KB - Virtual size: 25KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 100KB - Virtual size: 132KB

.text
Size: 28KB - Virtual size: 28KB

.data
Size: - Virtual size: 1KB

.rsrc
Size: 128KB - Virtual size: 128KB

yfeipyp
Size: - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 34KB

.data
Size: - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 28KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 72KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 72KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 1KB

.ndata
Size: 72KB - Virtual size: 72KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 24KB

.data
Size: - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 10KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 29KB - Virtual size: 32KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 29KB