61bc6d4a0450779c532768ee7594c2f7fda8a0a8c53a04eb6a86538a5ebb64e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61bc6d4a0450779c532768ee7594c2f7fda8a0a8c53a04eb6a86538a5ebb64e9
Size

82KB
MD5

0c5c5bacafa03612e5087171629734f6
SHA1

03e73286eccfe1797b93ead63c2f9af4cfe7c3f5
SHA256

61bc6d4a0450779c532768ee7594c2f7fda8a0a8c53a04eb6a86538a5ebb64e9
SHA512

828f8139d670e5600be7dc411c0d33e5c78253ea48ec05125648adc0a2a5fb3c6e09bdda9ceb103105ccc7aabe0bf83c8fbfb0e873949baf800fabefa9d45b63
SSDEEP

1536:4XAQtk/HDcXn2F4M4VXMRFW6RBnQOOKTIBdleM7CpaA6scW:mW/jon2+M4ZaE6Ru6OleM7c6LW

Score

N/A

Malware Config

Signatures

Files

61bc6d4a0450779c532768ee7594c2f7fda8a0a8c53a04eb6a86538a5ebb64e9
.exe windows x86

398df3e18882a1e88f77548afa220cd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolder

msvbvm60

ord183
MethCallEngine
ord552
ord669
ord630
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord540

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ