5efa50b2bd9777eb502cc896a083a498448b0cab3f883f89051f6834b41b19bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5efa50b2bd9777eb502cc896a083a498448b0cab3f883f89051f6834b41b19bf
Size

74KB
MD5

555090a4d12d52dfe56cd4509476cc80
SHA1

4c2017785fdf24b7777e282c3b135f5e44d25b4b
SHA256

5efa50b2bd9777eb502cc896a083a498448b0cab3f883f89051f6834b41b19bf
SHA512

6cfa2e72ce2f2876a3bdf7e1e5b8c576efb83f8d624761779346b64b450bfac63e99daf8edbcea2e66b8788826510f20806555ca604838d7107bbe5dc54b23fa
SSDEEP

768:ULLJmAhBTClcALYUP1Dpx0pcTV6oIqCRtw2jOalI:YLYZcALDPdp6CCRtLI

Score

N/A

Malware Config

Signatures

Files

5efa50b2bd9777eb502cc896a083a498448b0cab3f883f89051f6834b41b19bf
.exe windows x86

0964e2307f9d3cd9f829d5538c59e86f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAnyAccessesGranted

msvbvm60

ord183
ord695
ord698
MethCallEngine
ord518
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
ord677
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432
ord540

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ