864ed8ca1d9155d99046fd533dc370a60c0245977191094caba4c6be68d20d17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

864ed8ca1d9155d99046fd533dc370a60c0245977191094caba4c6be68d20d17
Size

80KB
MD5

5752e354300fed8d82f04e0a9a56f130
SHA1

b03a440699a05553c0bfee7900a05a8dc2fdd174
SHA256

864ed8ca1d9155d99046fd533dc370a60c0245977191094caba4c6be68d20d17
SHA512

b72f0d59267085b359ab48627250222b75bc15f8bdb9942ff440f8906fcc69694e7c4e8bdfba82bb9209d7f54a1650dcd5a9c72e94e95a7a3616d9a6158c6451
SSDEEP

1536:qsPdgeozuy16Lti8n42APNR2dcScLcPcxeTanuUHWO0s3xxNMq39gk34iSqR:geozud4PNEdcScLcPcfnuk0yR

Score

N/A

Malware Config

Signatures

Files

864ed8ca1d9155d99046fd533dc370a60c0245977191094caba4c6be68d20d17
.exe windows x86

9ce3e582d1635a9525889cb65965bc5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord516
ord517
ord518
ord519
ord557
ord669
ord520
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord674
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord541

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE