a8fe21c29e94291f05c19d09a3ded788017d03d5bf3dbf88d374e315988f2242 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8fe21c29e94291f05c19d09a3ded788017d03d5bf3dbf88d374e315988f2242
Size

30KB
MD5

656cf3811a4aea63e611974d13834380
SHA1

c414605a3c3b7198152cfdda32a5ce8120d6782a
SHA256

a8fe21c29e94291f05c19d09a3ded788017d03d5bf3dbf88d374e315988f2242
SHA512

fe7be731674d56df3f9045e6fd40a53039bf07dff615671a8a2f98323e3a153f700461b3ce5bdc550769e1a9ca3b9fdf4fc9e4a3a0b517a8f4569952282a7cab
SSDEEP

768:qX/DsuCVrxetEoUm/uCDVhiQkxJzeAh/c:qXYZhqEv6krz7hk

Score

N/A

Malware Config

Signatures

Files

a8fe21c29e94291f05c19d09a3ded788017d03d5bf3dbf88d374e315988f2242
.exe windows x86

b0ff65766a30bb1bc795304a809657a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord588
ord696
ord589
ord697
ord698
MethCallEngine
ord598
ord520
ord631
ord709
ord524
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord573
ord681
ord100
ord616
ord617
ord543
ord652

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ