0b56238cbee16156842be322256f5d3606e8796689483047e8c3ad8d8c3e9330 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b56238cbee16156842be322256f5d3606e8796689483047e8c3ad8d8c3e9330
Size

160KB
MD5

5312f34340e2a53f1d2ef9dd87413c80
SHA1

4c6a283457f4c7c09851f872dc946bf2ff5781be
SHA256

0b56238cbee16156842be322256f5d3606e8796689483047e8c3ad8d8c3e9330
SHA512

a40c46c99066fb9c02161e5cb81e4888ae36f9358d5b4f52abff335bbcd34ad9f922cd070ee6b847f67a8a0a3898146986a9a130cd7d3e5f5857443fab5392ea
SSDEEP

768:S7SpCDPYxhIPBryUmU6tI4UBndTaDyNMRzEQU5e3bw1o+5CkwtMq:S7ZDGidjCCndTuyNMS3cw1o+5Ckwt

Score

N/A

Malware Config

Signatures

Files

0b56238cbee16156842be322256f5d3606e8796689483047e8c3ad8d8c3e9330
.exe windows x86

f9eaa13578ff93c9a33abc464be1a961

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord517
ord593
ord594
ord520
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord431
ord617

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE