659c9f5ae1a0b7504becfc670a424412888705a6a509bbae1db39e17523677ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659c9f5ae1a0b7504becfc670a424412888705a6a509bbae1db39e17523677ca
Size

260KB
MD5

5ec52c7a0588c6253cae5e6b550b6841
SHA1

a536ac94b474f72677e139eb547f0d44c5f0373d
SHA256

659c9f5ae1a0b7504becfc670a424412888705a6a509bbae1db39e17523677ca
SHA512

a81aae41bc990d32da6187bdf72e5ee65afd5cc2f0b6bb3ab32dc2c2825efe868ef75724dbeee073c9294d6ef77978ef4fe0052497ba3db36cff23479b0fa8b3
SSDEEP

6144:JcUK3qDpvTT6LDuibOLf+nStvAbVBi1SXn:JcU7TOLDuiby6SVAIS

Score

N/A

Malware Config

Signatures

Files

659c9f5ae1a0b7504becfc670a424412888705a6a509bbae1db39e17523677ca
.exe windows x86

f2ba1e6021ee51caa7059c5e0d62d110

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord644
ord100
ord617

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dythhet
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE