1c0971882943fb7069fae1ffb1f9c8f3dbc8297b6507bd584821c698a93406f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c0971882943fb7069fae1ffb1f9c8f3dbc8297b6507bd584821c698a93406f8
Size

128KB
MD5

6d7196ba95d777a16d38d3a350ff83f0
SHA1

1b8ae67f13ef283556c10d63382acceaad02192c
SHA256

1c0971882943fb7069fae1ffb1f9c8f3dbc8297b6507bd584821c698a93406f8
SHA512

5ad185eb80a26187a55e87d76cff62b7542e9d32f1512361cb495fee3e58e2db45e232b71087daa1f73b5c09c935b3a9ac382c5242ec4a323f6082a2ff4444d3
SSDEEP

3072:L3fO84tvowsZdA8TiEMPs+3CDmkJQae5qdTE6UR:TfOttwI59Ps+3CIae5qUR

Score

N/A

Malware Config

Signatures

Files

1c0971882943fb7069fae1ffb1f9c8f3dbc8297b6507bd584821c698a93406f8
.exe windows x86

4ca82daa9721ab9c73fddabf489efaa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
MethCallEngine
ord518
Zombie_QueryInterface
ord553
ord557
EVENT_SINK_AddRef
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ