9b689db3542fee57faa088a11ea9037ec89e6191eadee023ceb3db591c5bd130 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b689db3542fee57faa088a11ea9037ec89e6191eadee023ceb3db591c5bd130
Size

244KB
MD5

1091766afa035f5d109548d71859a8dc
SHA1

d90fcc7a602ac36b6917358f6607f8564b66f0b5
SHA256

9b689db3542fee57faa088a11ea9037ec89e6191eadee023ceb3db591c5bd130
SHA512

536cad51ff3a9590522169e1d1ad83a3855714687fd168cb09c683e42fae3b6adb608f481c7d2b8e5f4c32f2c5c839797da44cb670cdc1f4fe92fe1195b44a8c
SSDEEP

3072:EIdcFLEdskgrt05bnwhVh6PTPAVt15+4xb:BWjZ0xCVh6MVt15+4

Score

N/A

Malware Config

Signatures

Files

9b689db3542fee57faa088a11ea9037ec89e6191eadee023ceb3db591c5bd130
.exe windows x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xramgir
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE