6d89b446b80785b80835eb2db1265dbeb41a6c8acf8376860e8d12e3b9762211 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d89b446b80785b80835eb2db1265dbeb41a6c8acf8376860e8d12e3b9762211
Size

92KB
MD5

a313c8bfaf5cdc2d58f52ff3c492305a
SHA1

029911521bc5d10a601f170cd12ae7112d97fe54
SHA256

6d89b446b80785b80835eb2db1265dbeb41a6c8acf8376860e8d12e3b9762211
SHA512

df96953a4f2033d0eb5a8138150737a015877a870f33111ba1f369cdd26ec2ee08f6d1e9264bb8435ab029989e340a133b46b28b32c9d4fb922840367c940118
SSDEEP

1536:rXqo2GvVR/KequmY1qje8TX7OvWXfGY1vAvgv4GAkHYEAg:l2vVY1AOUvAvmn4EA

Score

N/A

Malware Config

Signatures

Files

6d89b446b80785b80835eb2db1265dbeb41a6c8acf8376860e8d12e3b9762211
.exe windows x86

710762dcdc919b79ac546b909235743e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolder

msvcrt

ord1

msvbvm60

ord515
ord592
ord305
ord528
DllFunctionCall
ord670
__vbaExceptHandler
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ