9f43d96f459f5254eb8c86afc1fca58ed432c048f8d85a64dc666439ad198d52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f43d96f459f5254eb8c86afc1fca58ed432c048f8d85a64dc666439ad198d52
Size

208KB
MD5

68326bbfe8012ff00635dc4188614dbb
SHA1

4f2b60eb59d4ab1b9027c9bb906cd4df8e94ea94
SHA256

9f43d96f459f5254eb8c86afc1fca58ed432c048f8d85a64dc666439ad198d52
SHA512

feee84ea5cbe565967d71abb39f7d8a188e7973a3a75bacf3c61971beb23e7bbdf3b82d7092d1320ed9c44147a5ed017dbe97f85720e101871143e19fec26048
SSDEEP

6144:fFbAnlLJ8qkDIuem8lf8/OdI6pruR2L0i/:fFEnlkmaE5pJd

Score

N/A

Malware Config

Signatures

Files

9f43d96f459f5254eb8c86afc1fca58ed432c048f8d85a64dc666439ad198d52
.exe windows x86

cad9d7a1e55dc4edd87135d205fee319

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE