420da00e3c9de054752dcb1a614fe5b470fab73feb0b03d4b50f4cec7b479886 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

420da00e3c9de054752dcb1a614fe5b470fab73feb0b03d4b50f4cec7b479886
Size

116KB
MD5

49d1e1ddd06728780d5d162be62b0fb0
SHA1

99a78596d2badddd7fb575483ccaf7faf40933c6
SHA256

420da00e3c9de054752dcb1a614fe5b470fab73feb0b03d4b50f4cec7b479886
SHA512

c57b885927f5fc9cb84f2a365b16564986e6d768e29fadfc3b900288870d4f92cef6d256e50a687b7f9526801be3b916e9b3d1381644b88c733085c5bac9b5f3
SSDEEP

3072:cwXjfNW86zktBllrJ/Iy0/AOTp/jJSucQA:FTFZplrxIy04u7JSl

Score

N/A

Malware Config

Signatures

Files

420da00e3c9de054752dcb1a614fe5b470fab73feb0b03d4b50f4cec7b479886
.exe windows x86

a26f84368fc0ba795e7f5e037732c7b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord692
ord589
ord697
MethCallEngine
ord512
ord516
ord593
ord598
ord631
EVENT_SINK_AddRef
ord560
DllFunctionCall
ord672
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord100

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ