ef0fcaa595770e75283463726682d2ab4309c1e2425f87d1aef8dcd5dbe0120a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef0fcaa595770e75283463726682d2ab4309c1e2425f87d1aef8dcd5dbe0120a
Size

308KB
MD5

6ecc228926492111afb4a24396973f17
SHA1

17045c4617bebfddce80b5ed342fd73d452db942
SHA256

ef0fcaa595770e75283463726682d2ab4309c1e2425f87d1aef8dcd5dbe0120a
SHA512

3887905cf219b61ac104cfbf70bb173793693462c4402b8a611b5f3550e2113a7670ec102866e21dfeb1a98a13bcc4172563d69b111623421f6a8e4a6fd4d04a
SSDEEP

1536:SS0vY3CC4uzlEXprmHphKqcVcduiCgKDjnmX290St/nBvIDaf0JKxO:10CCC4uzlEr23Kwui8Tekdt/BA40o8

Score

N/A

Malware Config

Signatures

Files

ef0fcaa595770e75283463726682d2ab4309c1e2425f87d1aef8dcd5dbe0120a
.exe windows x86

103af3832ed9965c8bf53747b76c3031

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord558
ord666
ord669
ord595
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord573
ord681
ord576
ord578
ord100
ord616
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xLuOpPx
Size: 272KB - Virtual size: 4KB