fa47bb9f8d8441483ac77c7665f8a77b57ad834d7617b8b8428e148e82b4961c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa47bb9f8d8441483ac77c7665f8a77b57ad834d7617b8b8428e148e82b4961c
Size

556KB
MD5

6147eb4eb4762712e2983851564cb8d5
SHA1

4dd6db8c9355210d74201be921300886823aae79
SHA256

fa47bb9f8d8441483ac77c7665f8a77b57ad834d7617b8b8428e148e82b4961c
SHA512

635ee871259ec3b392458dd1e5d3ee5f610c070f315b2e591c52bc44ebfbeccb813affaef263ba53555502ee8d213030a21a5c00fc5563ab29d21c3c0b6e2e90
SSDEEP

3072:J4GSBN3SVlFgd2/I7ZDI85RKj6zgKf5TK3SVlFgd2/I7ZDYHS8KAgrO9R+I:J4GGN3OlOZDZ5Wg5u3OlOZDYHX5gCSI

Score

N/A

Malware Config

Signatures

Files

fa47bb9f8d8441483ac77c7665f8a77b57ad834d7617b8b8428e148e82b4961c
.exe windows x86

38303ebeba79cf3d90b99314c34188b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ