1f96df35561286a9c036aca1b4666caa22c76a067c068038a1559efc77b58119 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f96df35561286a9c036aca1b4666caa22c76a067c068038a1559efc77b58119
Size

49KB
MD5

4ddff8e8c08f29694a3da79206c58cf0
SHA1

0e8f8e5e58da19ac976907825cfe6c39a051bedd
SHA256

1f96df35561286a9c036aca1b4666caa22c76a067c068038a1559efc77b58119
SHA512

a2ab9b4b1671d0179e2ccdec50d267e55cf60f4181f0628b520d4ff7dc6d55b04a2176dc1c34672555fdd7f5d12318a927d9acee0522b804cdd9df4971600bd2
SSDEEP

768:IIAWvMc/TWXMqTvviaqWi2PrG+Oyac/7k:IfSMcCXMqTvv/TGPA

Score

N/A

Malware Config

Signatures

Files

1f96df35561286a9c036aca1b4666caa22c76a067c068038a1559efc77b58119
.exe windows x86

59ec75580f71bfdcd9e31ff91fa9241c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord588
ord696
ord697
ord698
MethCallEngine
ord661
ord665
ord558
ord598
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord678
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord714
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord573
ord681
ord100
ord616
ord617

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ