4867181c2235aecb3fe4a5f4809e43d81ac55ade0abeb8c883289d3593d9bd8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4867181c2235aecb3fe4a5f4809e43d81ac55ade0abeb8c883289d3593d9bd8c
Size

168KB
MD5

84204dbd3648675d136fa839669a7e00
SHA1

fbebfea5fff2a0b9fdd22e1de9a2decf3e8f91fa
SHA256

4867181c2235aecb3fe4a5f4809e43d81ac55ade0abeb8c883289d3593d9bd8c
SHA512

5bbdc50c419f0ee229b2a5d84b69c637e90a578514c0ec6046eb0186d5c00dd5567e783e59cf34ffbdf188b226ff5d5579d1e890646d51cdb2843b254b8f25d5
SSDEEP

3072:MIggrwjXGhmOIYZ7FEqRt1oI/LGJEUFZOqIECWf6xIYBjb:MIlqGmCZ7FEqRvo+LXU/1f6x1

Score

N/A

Malware Config

Signatures

Files

4867181c2235aecb3fe4a5f4809e43d81ac55ade0abeb8c883289d3593d9bd8c
.exe windows x86

3697944a64a62226d23da3306d9467c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

thumbs .db

MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

munuugr
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE