ffd8b9db241d05e471ae014e87f44716195932906e26b9a92f36af8acad2178a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffd8b9db241d05e471ae014e87f44716195932906e26b9a92f36af8acad2178a
Size

36KB
MD5

933b0735da75d264cc797648dbaa4d40
SHA1

c08afdf88b55ea023a215c1c3c3176a88b083800
SHA256

ffd8b9db241d05e471ae014e87f44716195932906e26b9a92f36af8acad2178a
SHA512

1931811f2798aafcb69bf584b14f7ac1ac95d562d48d3b3b38629c3af183017a76c24124d70bab80ce0a4c70c644e28c4dc69e6003648bb712187c9df221ad33
SSDEEP

768:OD1UtrU15I5Ys5HvHFXjRCV5Zous9h7w+lJYCyZx:Oig15Zs5HvHR9CVbD+lJe

Score

N/A

Malware Config

Signatures

Files

ffd8b9db241d05e471ae014e87f44716195932906e26b9a92f36af8acad2178a
.exe windows x86

01d2bd638f0a976b01a69b7fb5b85b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

kernel32

MulDiv

msvbvm60

ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ