d2a9c0f30c95df5e91227fc7ffb2b878254307308a18aeb712298005ffeac09e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2a9c0f30c95df5e91227fc7ffb2b878254307308a18aeb712298005ffeac09e
Size

256KB
MD5

46389e68ed23c81f33ece012e32f625d
SHA1

a294f582d4aaa80b206bd8b7b33656c396e40c96
SHA256

d2a9c0f30c95df5e91227fc7ffb2b878254307308a18aeb712298005ffeac09e
SHA512

3dd7676ee0fa144709ef999023ba120aeff557b7b5a92e285f9689e67257311070fb0ab41065a2401249b710a2305072af82ee6279f72be3939ded5b2f407e2e
SSDEEP

6144:mbr8v8b/6cO0CF+f4aqosABK9p60CF+f4aqosA:g

Score

N/A

Malware Config

Signatures

Files

d2a9c0f30c95df5e91227fc7ffb2b878254307308a18aeb712298005ffeac09e
.exe windows x86

bf9a7acee92f86662ce4db12c709e741

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord587
ord696
MethCallEngine
ord516
ord517
ord518
ord519
ord552
ord660
ord591
ord594
ord595
ord301
ord598
ord520
ord307
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
ord674
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord717
ProcCallEngine
ord535
ord644
ord645
ord648
ord571
ord572
ord681
ord685
ord578
ord100
ord613
ord616
ord617
ord618
ord619
ord546
ord581

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ