fab363c9e43ad151bd5e1296ece149535da31fca9f336a6451651f42bb372b8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fab363c9e43ad151bd5e1296ece149535da31fca9f336a6451651f42bb372b8a
Size

36KB
MD5

923703d7cbc2e258b8e555d971e16f68
SHA1

530e53fb8825a15c0ec3d2ebed69e2f68c5e9624
SHA256

fab363c9e43ad151bd5e1296ece149535da31fca9f336a6451651f42bb372b8a
SHA512

a56923f00e00040b53e70fbb6d347626b0bba0e2bc91b7fc8ad895e14ad7b8da3583751f117818536401744863f26dc6876823eb720d0788a309162d77fcbeb5
SSDEEP

768:S+RG4N68y6Hm/F3/De0/qKe09O8HL2TnlTgn6kd:SCGX86zPe6HCTnJA6kd

Score

N/A

Malware Config

Signatures

Files

fab363c9e43ad151bd5e1296ece149535da31fca9f336a6451651f42bb372b8a
.exe windows x86

3fd6a8dc6e77197c32957e74c302449e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmReleaseContext

msvbvm60

ord183
ord697
ord698
MethCallEngine
ord519
ord592
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord680
ord681
ord100
ord432
ord617

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ