e9a64c6724436fafa45b747892ee9f261c7d30d02e0c3b96e8009c603b7474a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9a64c6724436fafa45b747892ee9f261c7d30d02e0c3b96e8009c603b7474a1
Size

128KB
MD5

801b56f1cc687d25e6c9b052e7b07d20
SHA1

e1eea5ca1566690e20108d81d360d38b4f09132b
SHA256

e9a64c6724436fafa45b747892ee9f261c7d30d02e0c3b96e8009c603b7474a1
SHA512

dc226c07129b9eb531f30fe3b16dfefe3b5e5ff82e266f30877e8247e36399fcdb59436301d64918ebc5164cf6ab43bf613c54951bd68e7c8a14f3744ae64a11
SSDEEP

3072:3TGMwEnxwnQiLxsvQptmufNfnKGWrdWC5ULE:3T/iQiLxs6tKrrAhw

Score

N/A

Malware Config

Signatures

Files

e9a64c6724436fafa45b747892ee9f261c7d30d02e0c3b96e8009c603b7474a1
.exe windows x86

4ca82daa9721ab9c73fddabf489efaa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
MethCallEngine
ord518
Zombie_QueryInterface
ord553
ord557
EVENT_SINK_AddRef
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ