f85705617524deedaac50a92df579b22815046101d33204a60a0e793ae11c43b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f85705617524deedaac50a92df579b22815046101d33204a60a0e793ae11c43b
Size

268KB
MD5

a29a241a898663b9f28d3ccddbfd72dc
SHA1

95dde3bc625fc66acb725dedbca6a04141e4a1ad
SHA256

f85705617524deedaac50a92df579b22815046101d33204a60a0e793ae11c43b
SHA512

447b0c3628fa7d4d58e66ee994f1a52e146b80f3b3b76919c3160e825b3c54ffaaa4ab8559e1924aafa5a2361b78e0b322d284354aaef6d30ebcdeea9480240e
SSDEEP

6144:6Bu9wWebm64kMWRveL4xfNrf3IjscA67iuCOIU86/:Nu66tMWdJfYQr67VIO

Score

N/A

Malware Config

Signatures

Files

f85705617524deedaac50a92df579b22815046101d33204a60a0e793ae11c43b
.exe windows x86

28f549fe147810b426a803049126a81e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord621
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord100
ord616
ord619

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE