9b970bb64513c3503a42745913e4c40844e7ed37f98cb49d02c831276d552d43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b970bb64513c3503a42745913e4c40844e7ed37f98cb49d02c831276d552d43
Size

36KB
MD5

91066ea87e593b3ea6873519356b8c41
SHA1

c20ac104c13186e64bb7b7b745075fb4f91bfb03
SHA256

9b970bb64513c3503a42745913e4c40844e7ed37f98cb49d02c831276d552d43
SHA512

ec3c52b501439fd99ccbabebf2890fda1a09e15f2a38b68e7c7af9fa50142828e16b946a00bdf4f87cad4c26e2542d68e2aebe95e641be88f063db77aa74730b
SSDEEP

768:i+RETF8y6Hm/F3/De0/qKe09O8HL2fnlTgn6kd:iCETF86zPe6HCfnJA6kd

Score

N/A

Malware Config

Signatures

Files

9b970bb64513c3503a42745913e4c40844e7ed37f98cb49d02c831276d552d43
.exe windows x86

3fd6a8dc6e77197c32957e74c302449e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmReleaseContext

msvbvm60

ord183
ord697
ord698
MethCallEngine
ord519
ord592
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord680
ord681
ord100
ord432
ord617

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ