601f1e4f36491148accd1d69084dad265d4fcb3b7f02516f788e66b59e5d4806 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

601f1e4f36491148accd1d69084dad265d4fcb3b7f02516f788e66b59e5d4806
Size

152KB
MD5

96ddb33c4015c7de858d56e487373710
SHA1

be894bab113fcf6c7c9cbeae05c092cce446a39d
SHA256

601f1e4f36491148accd1d69084dad265d4fcb3b7f02516f788e66b59e5d4806
SHA512

68f59f8477dc8424af8ebfa883dd84753112456d963b6f53b7cdf41062f49ecfa3405051cfa86409c110b94d1a458f9c4714d0d08efebdc407d8623c98af27b2
SSDEEP

3072:VcBcgBnYqcUwmbH5F0dPNYDQ3NvuWIWa6MJ:msqczuqdPNYDMiJ

Score

N/A

Malware Config

Signatures

Files

601f1e4f36491148accd1d69084dad265d4fcb3b7f02516f788e66b59e5d4806
.exe windows x86

378ee699cef777009d87319aa9d38c25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetConnectionDialog

advapi32

RevertToSelf

msvbvm60

MethCallEngine
Zombie_QueryInterface
ord702
EVENT_SINK_AddRef
ord562
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ProcCallEngine
ord644
ord100

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ