55e6d8e29a1617ad215d60e00d84c921f8556140e93707267b9043225fe16547 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55e6d8e29a1617ad215d60e00d84c921f8556140e93707267b9043225fe16547
Size

156KB
MD5

850014aea2a9ac43f121f0b7c4127bf0
SHA1

09327c775f55cb4b72e22467e893e9963716c435
SHA256

55e6d8e29a1617ad215d60e00d84c921f8556140e93707267b9043225fe16547
SHA512

984f129b7a1f7f01ac4e6e9b51e9ca4ee80c76cc9af9ac6568186276ed3c03d31fab0e7ac6ef52aace4df6c590b48a6e3c1d37539045542e160e9cdff2514e53
SSDEEP

768:fZaOxhLybOhNWLQ84dpOboIOUiSJdP4joIOUiSJdP4oIOUiSJdP9CMc4dAMj572J:fZaIybiWLcbOr6liFmL8Rad3pP

Score

N/A

Malware Config

Signatures

Files

55e6d8e29a1617ad215d60e00d84c921f8556140e93707267b9043225fe16547
.exe windows x86

776a21aca52fe95722143273ce5cf597

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

ord583
ord586
ord695
ord698
MethCallEngine
ord517
ord518
ord666
ord593
ord594
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord648
ord570
ord573
ord685
ord100
ord687
ord616
ord617
ord618
ord619
ord542
ord580

Sections

.text
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ