6a766ffd6be298a75b81223ac13b66a5afcece403598f501d7920a71462931f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a766ffd6be298a75b81223ac13b66a5afcece403598f501d7920a71462931f5
Size

232KB
MD5

6bb7cbc15d998930f43637be37d79200
SHA1

87898b592e14c462255046a433f0d9027daa7ebc
SHA256

6a766ffd6be298a75b81223ac13b66a5afcece403598f501d7920a71462931f5
SHA512

49dbf17452a9a48a470e4a38263b7ae7ad78c7017c5af5423d62d7d1cb2453cda0a6d5e36e3f2ba380caccd04a37c90480190df36826b7d8d9297299cf2161ef
SSDEEP

3072:BdkRhPtBsw6ZqhPbiqFoeKnZhCR0uNRtfI/8x:BsPh8xuNRtf

Score

N/A

Malware Config

Signatures

Files

6a766ffd6be298a75b81223ac13b66a5afcece403598f501d7920a71462931f5
.exe windows x86

76fc03af35628553a28f837eee65c34c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
MethCallEngine
ord662
ord631
ord524
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ