4971dabd1f2cb393593f171ca52d2bab4e688d331d964e0960497deaadf845ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4971dabd1f2cb393593f171ca52d2bab4e688d331d964e0960497deaadf845ce
Size

64KB
MD5

4339680620b015e90ab017ae7a71b3b0
SHA1

3997509efc563cc58ac92358a9729d691ea16bc2
SHA256

4971dabd1f2cb393593f171ca52d2bab4e688d331d964e0960497deaadf845ce
SHA512

91c402d364d123c3fec9f443f963c9040a12ab29c4922742305e72575a324dec0b2ab85ec8300734ecd0c48822f445e4c1b582fe8c41361b96f1857222ae5c3d
SSDEEP

768:lFd04EpnIPz8v96hkbObBaTV0ocEnaLj8+IBfCylsCclAYbxhX2:l3044I78v96euEnaLj8bh+l9

Score

N/A

Malware Config

Signatures

Files

4971dabd1f2cb393593f171ca52d2bab4e688d331d964e0960497deaadf845ce
.exe windows x86

3c342e237e3474096f70f4b76f597be5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ContinueDebugEvent

msvbvm60

ord183
ord697
ord698
MethCallEngine
ord598
ord520
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord573
ord681
ord100
ord616
ord544

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ