bdbb3d4c116446e9cd3082ce31280f8df6a389d9d3cd0990f5313871f8950a53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdbb3d4c116446e9cd3082ce31280f8df6a389d9d3cd0990f5313871f8950a53
Size

64KB
MD5

6e71acedcc6cf3955342d6f18ea4b530
SHA1

9ee6a009aa591ae8453c653c1e796d5fe9c1cdb8
SHA256

bdbb3d4c116446e9cd3082ce31280f8df6a389d9d3cd0990f5313871f8950a53
SHA512

7a9efeae99b96ce3698b8ac574dea195faa3342362fec2329c9a5a4bbece91e5cd17de4a03b56e1942fdec0ab5f532f91643fbb39c66669cddbfa7e2a254c094
SSDEEP

768:LPvsy2iE/LxDkXpXW+Q84vvuAegZrz3iZq0FNKPsBqEA1+3S654c8:rvsFD2ZXW+y+uaZq07KPsBq2x4c

Score

N/A

Malware Config

Signatures

Files

bdbb3d4c116446e9cd3082ce31280f8df6a389d9d3cd0990f5313871f8950a53
.exe windows x86

ecb122d0f3e9ad00ef417a7dd07802e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ImpersonateNamedPipeClient

msvbvm60

ord583
ord187
MethCallEngine
ord556
ord595
ord301
ord598
ord307
ord631
ord709
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
ord674
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord644
ord648
ord571
ord572
ord681
ord578
ord685
ord100
ord616
ord619

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ