0e2ab63a899a4edb9347e69f08fca2162d67b48ba6519d30e766961ed5caa698 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2ab63a899a4edb9347e69f08fca2162d67b48ba6519d30e766961ed5caa698
Size

102KB
MD5

6b7dc29f5a9ab4e2d5e718e17f13cf60
SHA1

53b0b9806c2d0c12b7cfbb37102f7300649fc827
SHA256

0e2ab63a899a4edb9347e69f08fca2162d67b48ba6519d30e766961ed5caa698
SHA512

cb5891a09c680738bec8d2f28ded2225c9538fa4f5729e570c7ea014fdc66ea666648868eeabf01b90258be9fb6e2fb7f5410e6f51f8f962875de8ffa609f1a5
SSDEEP

1536:u6shRgUZ1qLbKgy2rqE/pnZ7YafblXsKdabfoRQNR5z:a4bKgnrTxZ7YafblXsKda0S

Score

N/A

Malware Config

Signatures

Files

0e2ab63a899a4edb9347e69f08fca2162d67b48ba6519d30e766961ed5caa698
.exe windows x86

cdeade61ae62dc2d0566a615eb2e0683

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetProcessWindowStation

msvbvm60

ord183
ord696
ord698
MethCallEngine
ord516
ord519
ord557
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord573
ord681
ord100
ord616
ord432
ord617

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ