499a4d56a154c3c6bdeb730a0c0058aaa5bfdc69028a49b29f8bc804879c7030 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

499a4d56a154c3c6bdeb730a0c0058aaa5bfdc69028a49b29f8bc804879c7030
Size

298KB
MD5

6716f6a603c3d000709533cbb4fbc3e0
SHA1

7694f7b0faca281c0d63272f11e005f0d7f6bc7f
SHA256

499a4d56a154c3c6bdeb730a0c0058aaa5bfdc69028a49b29f8bc804879c7030
SHA512

a88647037392a73fa98f888e138ea31f9fddce96438ecb6c52e2d054f8120342d82edcb832bf9aef87f147775e68392d8575c914731ba64d02cae30ada507d0c
SSDEEP

6144:h98vaUNARKdww07LLqZA46PQEdGfmPaB7/WIvnksEVA14hYp9XY:0xNAC6aZuPDdbPGr1vklodI

Score

N/A

Malware Config

Signatures

Files

499a4d56a154c3c6bdeb730a0c0058aaa5bfdc69028a49b29f8bc804879c7030
.exe windows x86

33ce446b69d9eae8747239b5634ff009

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
_CIcos
_adj_fptan
ord693
__vbaFreeVar
__vbaStrVarMove
ord695
ord697
__vbaFreeVarList
_adj_fdiv_m64
ord512
ord514
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord594
_adj_fdiv_m16i
ord702
_adj_fdivr_m16i
ord520
ord708
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
ord562
DllFunctionCall
_adj_fpatan
ord676
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaDateVar
ord536
_CIlog
ord646
ord539
__vbaNew2
_adj_fdiv_m32i
ord572
_adj_fdivr_m32i
ord573
ord680
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord687
__vbaVarDup
ord613
ord614
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
ord658
__vbaFreeStr

Sections

.text
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ