0ca79a09df24d21d8e7a837f256cc24a795c479eb1cf275406c9c65d7d051ba1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ca79a09df24d21d8e7a837f256cc24a795c479eb1cf275406c9c65d7d051ba1
Size

908KB
MD5

a3aa905ef0d2649954436e017dcca748
SHA1

aab231c658546411c994f31402dd830fce74b79e
SHA256

0ca79a09df24d21d8e7a837f256cc24a795c479eb1cf275406c9c65d7d051ba1
SHA512

4c4bf2d7f7f18c7919c270d9df02410a514fd4a96bcd777be07d85cacfc8411c0fe8d42a5e53ccf524480ca8e7ff9a5326f491846807b7e49993da18af4a8f4a
SSDEEP

384:ngeRgJKsDivy3ALfcr8hI/XI9l7jdYTUBLA7Z:1Xxvy3EYcgXI9liUt8

Score

N/A

Malware Config

Signatures

Files

0ca79a09df24d21d8e7a837f256cc24a795c479eb1cf275406c9c65d7d051ba1
.exe windows x86

3cd1c5783e325df8b0eeb28a85decf52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord631
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 900KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ