824139eb444930ff504d67649b323821f296b1bb0b8b906793c8c071ffb8324f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

824139eb444930ff504d67649b323821f296b1bb0b8b906793c8c071ffb8324f
Size

320KB
MD5

88437bb78abd5887ae27b47c3df3652f
SHA1

2eab8367f35b8c30d38ac514f00c57736c0678ee
SHA256

824139eb444930ff504d67649b323821f296b1bb0b8b906793c8c071ffb8324f
SHA512

d5fe17047f0ba63c07488eef56989ff799315e7570e1c4c76cae12924b14b61658546c7ea676eecd3d222454873e0845061b83539d0624295cfd8267170b4e45
SSDEEP

6144:X/P/GibZdPXUoxFiiQkquZhFoP7SCW/CW68QZ1Qeme003U0Ko+mrpfNv5AfA7nmB:FhGP7DGejU0VNv5Af0naL

Score

N/A

Malware Config

Signatures

Files

824139eb444930ff504d67649b323821f296b1bb0b8b906793c8c071ffb8324f
.exe windows x86

a57a8aff743b57da27bd214c80d96451

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord585
ord586
ord589
ord698
MethCallEngine
ord516
ord517
ord519
__vbaCopyBytes
ord628
ord552
ord553
ord660
ord667
ord591
ord595
ord598
ord706
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord561
DllFunctionCall
ord672
ord675
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord717
ProcCallEngine
ord535
VarPtr
ord539
ord570
ord648
ord680
ord575
ord100
ord610
ord613
ord616
ord618
ord619
ord542
ord545
ord548
ord581

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ