bb69e9724aa66cdb7ab6c6db3eaaf434c851a6c1346a95fd7c4819fff05b64e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb69e9724aa66cdb7ab6c6db3eaaf434c851a6c1346a95fd7c4819fff05b64e8
Size

133KB
MD5

60749c3274e3bac8458040a44cd95280
SHA1

864d896630c4b14ca18a418c7bcafd4e3506bec5
SHA256

bb69e9724aa66cdb7ab6c6db3eaaf434c851a6c1346a95fd7c4819fff05b64e8
SHA512

97c02254248c66b08f803246ae658d6ba76a3fe63d5bcfcbb620b800ab2a7a9a01a4e52ffedf43302bb0955e251d6689226d134fe21625955a33360e5a379bc5
SSDEEP

3072:ZjVe5az7BQLRB5kA8fRghpBGapa9VJb5WSiCUFO:ZJewz7BQLDqghp7DM

Score

N/A

Malware Config

Signatures

Files

bb69e9724aa66cdb7ab6c6db3eaaf434c851a6c1346a95fd7c4819fff05b64e8
.exe windows x86

9535d1185518a1812a3cd665d0ef5ee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RevertToSelf

msvbvm60

Zombie_QueryInterface
ord702
ord678
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord544

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ