211b58206724ca4ae4d201e1e8864830ccd996b787727dfea83b80d141d075c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

211b58206724ca4ae4d201e1e8864830ccd996b787727dfea83b80d141d075c3
Size

232KB
MD5

7880b621a6a309c2c96f362239774750
SHA1

7d96c435a974693507efa966ece077e5a97344a5
SHA256

211b58206724ca4ae4d201e1e8864830ccd996b787727dfea83b80d141d075c3
SHA512

e8908bfa6691e2f99663e28ad274cfd530d9055d65e6f2c5e2b176196def3c1c1355b010626bbfd8fcbb9c6baeed6981f9f33c0c440fe65ca6e84bf8b72c86b4
SSDEEP

3072:dXkRhPtBs+6ZqhPbiq0eKnZhCR0uNRtfY/8m:dYPMxuNRtf

Score

N/A

Malware Config

Signatures

Files

211b58206724ca4ae4d201e1e8864830ccd996b787727dfea83b80d141d075c3
.exe windows x86

76fc03af35628553a28f837eee65c34c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
MethCallEngine
ord662
ord631
ord524
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ