db49eda2e7780c4a72ced090cf9d05d991903f8cf50b88645a2ec2dc70a4d515 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db49eda2e7780c4a72ced090cf9d05d991903f8cf50b88645a2ec2dc70a4d515
Size

184KB
MD5

0b45340896e91691132a7a0f9bdb6d20
SHA1

eb4c43cb05d4ddea07c001aeabbcf7fbd4dc87db
SHA256

db49eda2e7780c4a72ced090cf9d05d991903f8cf50b88645a2ec2dc70a4d515
SHA512

8c6d4ad13a86f5eff7a24f6590415131e7ee6e029d285fa2fd5bc530acbc252d7e5de1a8349589fd2375abf10867c69c6d0a014c0277f7ab497e72c1a00159d3
SSDEEP

3072:eM1zSj/OYZrkGcEmx49BICGKeRpjqhsZFNBCz:3Sj/fFp9iCGPp/DNI

Score

N/A

Malware Config

Signatures

Files

db49eda2e7780c4a72ced090cf9d05d991903f8cf50b88645a2ec2dc70a4d515
.exe windows x86

4ffadd9ef91b990336d90c4b4d7eeede

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
ord694
ord695
ord588
ord697
ord698
MethCallEngine
ord519
ord660
ord553
ord662
ord663
ord664
ord595
ord303
ord702
ord703
ord598
ord704
ord309
ord709
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord537
ord575
ord683
ord685
ord100
ord610
ord611
ord612
ord540
ord544
ord546

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ