2b022a88847c5d928824e59f6cb1708842e5c20e2e3e607c839b0046f7423249 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b022a88847c5d928824e59f6cb1708842e5c20e2e3e607c839b0046f7423249
Size

556KB
MD5

63d82ab23001bc2802db8787ad9abe4e
SHA1

115b767f97229a9a1c3ee9d6db294f704dcb4078
SHA256

2b022a88847c5d928824e59f6cb1708842e5c20e2e3e607c839b0046f7423249
SHA512

d73cf35243eee4228753a47ae7cc08d3f5396b52980cd3cea29e310bd79029fa5a47f837e3d3939d9104a0bec22cb86fbc3590d97be8414633791a3433abfe8d
SSDEEP

3072:J4GSBN3SVlFgd2/I7ZDI85RKj6zgKf5TK3SVlFgd2/I7ZDYHS8KAgrO9R+U:J4GGN3OlOZDZ5Wg5u3OlOZDYHX5gCSU

Score

N/A

Malware Config

Signatures

Files

2b022a88847c5d928824e59f6cb1708842e5c20e2e3e607c839b0046f7423249
.exe windows x86

38303ebeba79cf3d90b99314c34188b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ