9d0888832a6c0cd96aa21c7ba73fea3244bf7290ea265e2379bb763a53e217fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d0888832a6c0cd96aa21c7ba73fea3244bf7290ea265e2379bb763a53e217fc
Size

74KB
MD5

0ba8204c371fc819674708e900745710
SHA1

9f8cdb86465ecf3c144169ad2db4bd22209aa7ba
SHA256

9d0888832a6c0cd96aa21c7ba73fea3244bf7290ea265e2379bb763a53e217fc
SHA512

2cc64ba9f81aab879eb6ea2a576e421080511117c03cd11bdd50481d58a7f2d34b6a2f20c2ea7314ad39aefc256a19dae2b85d1a52c44efbc07ef1e67fbf7b4a
SSDEEP

768:dLLJmVBTClcALYUP1Dpx0pcTV6oIqCitw2jOaly:tLYgcALDPdp6CCitLy

Score

N/A

Malware Config

Signatures

Files

9d0888832a6c0cd96aa21c7ba73fea3244bf7290ea265e2379bb763a53e217fc
.exe windows x86

0964e2307f9d3cd9f829d5538c59e86f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAnyAccessesGranted

msvbvm60

ord183
ord695
ord698
MethCallEngine
ord518
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
ord677
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432
ord540

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ