964434eb04a18755f60bf695eefcdfab00c763b3a0dde9322f806e001145c568 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

964434eb04a18755f60bf695eefcdfab00c763b3a0dde9322f806e001145c568
Size

1.9MB
MD5

72d74cce21b7faa307bd4e7d7c98fffe
SHA1

0ddf2cef59cc912182aa3e44fc756bb27faed3c6
SHA256

964434eb04a18755f60bf695eefcdfab00c763b3a0dde9322f806e001145c568
SHA512

ccf948f0e99baa238d44c7dbadcaff0159fa66d80ab3c38050bf590e0517d24782f6274f7ec728a79e44f3471219e106ce4ca989253e63bcf18ca26347883537
SSDEEP

6144:15fMLrNOvx0mya5fMLrNOvx0myH5fMLrNOvx0myUTh3ChBthdplRNZBVdvovRFTE:DxtxQxcByPJJ/XOHbux

Score

N/A

Malware Config

Signatures

Files

964434eb04a18755f60bf695eefcdfab00c763b3a0dde9322f806e001145c568
.exe windows x86

596b65d2150abfa974f9d78c64af2fa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord595
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord531
ord716
ProcCallEngine
ord645
ord571
ord685
ord100

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 412KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ