381f780f00415a311bb329328a8dbc848ddaad7e2a284f66e3b8d0eefc4cc34a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

381f780f00415a311bb329328a8dbc848ddaad7e2a284f66e3b8d0eefc4cc34a
Size

72KB
MD5

7731409c7266e01b417a63186eb7d780
SHA1

2757fb64d3549f9cedeb372205458d7b7f9053ca
SHA256

381f780f00415a311bb329328a8dbc848ddaad7e2a284f66e3b8d0eefc4cc34a
SHA512

8da24e2843123b04b46b3e8eef28c4df23ffe7b1065ce4e635c94908bd716a537dd217a3af89449bca01fd500a23cd0411077b5f6d129ccc60667d4bad80e05d
SSDEEP

768:dlraDgCtJ+wfIwrrBIg2Yd2SgoTV6oIWJs9c28moshfN4:zra0CPNgSBIgYSggJsamjO

Score

N/A

Malware Config

Signatures

Files

381f780f00415a311bb329328a8dbc848ddaad7e2a284f66e3b8d0eefc4cc34a
.exe windows x86

d763de8eccf820161f0d3b71a630750b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAnyAccessesGranted

msvbvm60

ord183
ord585
ord698
MethCallEngine
ord518
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord679
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord714
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ