ed5aabf8e64d74424210a815caf1b82cc96a0ba30510876e912f6b75eadd45a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed5aabf8e64d74424210a815caf1b82cc96a0ba30510876e912f6b75eadd45a0
Size

80KB
MD5

912f3102012ade4af2c0b8e5eae39f7f
SHA1

554b84a4fc5155045f272e5cfd0727b8bb5c1761
SHA256

ed5aabf8e64d74424210a815caf1b82cc96a0ba30510876e912f6b75eadd45a0
SHA512

ccc2b1f93d3e9e86d36e14f4eb9baa5d7122388b17bb44752b61678aba0eed6c0be4f9c6e10e4acb83a025fa3d90cb9772d3fa50856af569e32df13dc046243f
SSDEEP

1536:phVkmy/Zy1kUfzt8UqOfrh5/2TovsZkEjh2JEhYvLszo:qmwA1k6z2Shx2MvONF6Eh4Lszo

Score

N/A

Malware Config

Signatures

Files

ed5aabf8e64d74424210a815caf1b82cc96a0ba30510876e912f6b75eadd45a0
.exe windows x86

56fb9247bb526e79b672180cf8273676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

msvbvm60

ord183
ord698
ord662
ord669
ord592
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord544

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ