0f817726b2646c0dea83f0f3d8ecceed47e8e67f0ce606d4dcb16ba28b8d8bcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f817726b2646c0dea83f0f3d8ecceed47e8e67f0ce606d4dcb16ba28b8d8bcf
Size

133KB
MD5

449c854749f05f295ed335e60a348406
SHA1

70fe3779f2d75bc3d46bf641bce72e8367431102
SHA256

0f817726b2646c0dea83f0f3d8ecceed47e8e67f0ce606d4dcb16ba28b8d8bcf
SHA512

653d1c952ce7b9417c308a2b92e62e87bc95f23759d60dfc0d5907d24abde3a2173f278774e4e15263bf1a148545c110d9503a50da09dbeb13feecbfab2efbc8
SSDEEP

3072:EtVqyp3jYv2zRV6IneGJCA7iDb5WSJ56UB:ELtpzYERV6IL0AG1Z

Score

N/A

Malware Config

Signatures

Files

0f817726b2646c0dea83f0f3d8ecceed47e8e67f0ce606d4dcb16ba28b8d8bcf
.exe windows x86

9535d1185518a1812a3cd665d0ef5ee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RevertToSelf

msvbvm60

Zombie_QueryInterface
ord702
ord678
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord544

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ