516c7b30ffa2e399d97a8287e41d00647cd63859478c645d724c93d71b4f45fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

516c7b30ffa2e399d97a8287e41d00647cd63859478c645d724c93d71b4f45fe
Size

492KB
MD5

a25ba23649ed5544ad67403012509950
SHA1

47afebdc9184685b84f1bd239917008d0b6027e7
SHA256

516c7b30ffa2e399d97a8287e41d00647cd63859478c645d724c93d71b4f45fe
SHA512

93f00fa532841f13ea6ac069e99f7f4ad07c18d94f07e201be162bf8917fbe268a2091e486fd1758db197b0b728e3e8f7c855f2c5479557e225dde82e0de0441
SSDEEP

12288:nlfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCGj:d8ptT4qVtcek2aUC/hCi

Score

N/A

Malware Config

Signatures

Files

516c7b30ffa2e399d97a8287e41d00647cd63859478c645d724c93d71b4f45fe
.exe windows x86

87e1eff45d4b9d65f275a3b510f16b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ