f0d79caaede16432ca00a9a4d40db6fadd2937727b83bc0a1e10abaa0e568076 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0d79caaede16432ca00a9a4d40db6fadd2937727b83bc0a1e10abaa0e568076
Size

24KB
MD5

48a651c2a1e7b2f9ab872d6d37ac4ea0
SHA1

cdea419d1571b7d79d5450258d4fca04b643bea3
SHA256

f0d79caaede16432ca00a9a4d40db6fadd2937727b83bc0a1e10abaa0e568076
SHA512

326666ef43602896421ade38ff1b687a819657283dcb0ef50410083c0935ecd4b7011f5d257097611e7d7a8064bab854668988fd4ea7fd3b58349d28aa54e3ea
SSDEEP

384:2LO2UyJlG7jA6XZX9aEPnlDHIcgqr1t4lbEB:2RUyJAvA6XZX97HtqbEB

Score

N/A

Malware Config

Signatures

Files

f0d79caaede16432ca00a9a4d40db6fadd2937727b83bc0a1e10abaa0e568076
.exe windows x86

0e132f043ba3909366f2be45caaf1c17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord631
ord709
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ