f28f400647816ef56293af0490ec4602212254553ac390f52bd2b13004b97f1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f28f400647816ef56293af0490ec4602212254553ac390f52bd2b13004b97f1f
Size

47KB
MD5

6a2fa250b3e835970b9f7e269af25490
SHA1

4fcf701c95cdff30a3093ae26debdadaca2e66ef
SHA256

f28f400647816ef56293af0490ec4602212254553ac390f52bd2b13004b97f1f
SHA512

48607c5cd85829b31ce4e7c2d8832c352af706c52fcfd80636dc7b6839fe29635b2cef4b013f2b95f71a96403bbebdd0aea262cfda53aee898418261550c79cd
SSDEEP

768:Tv3A6E3QfeW5Izoxrtr1J1wQs+Oyac/7k:TPA6E3QfeW5IzoLsPA

Score

N/A

Malware Config

Signatures

Files

f28f400647816ef56293af0490ec4602212254553ac390f52bd2b13004b97f1f
.exe windows x86

290165b04326c6d8f6e12647e505addd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord588
ord696
ord697
ord698
MethCallEngine
ord513
ord661
ord558
ord598
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord678
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord714
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord573
ord681
ord100
ord616
ord617

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ