645a11aaadaf36858204f53caf6d611be8527fe9d05e399ec1cc349ba8d7a06d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

645a11aaadaf36858204f53caf6d611be8527fe9d05e399ec1cc349ba8d7a06d
Size

410KB
MD5

93aabfa27cd462881aadbb0f480a6e5d
SHA1

5147faf47c1ccb4775076964a3a53b42760c0025
SHA256

645a11aaadaf36858204f53caf6d611be8527fe9d05e399ec1cc349ba8d7a06d
SHA512

62a4f5f55359178e12f0c6a38d858bbb48fa53aff3dbf92b4aa0895572e28375f7640718660cde37146fe464cae9a375bd149ab74b69ee66807e891be24e367a
SSDEEP

6144:jC4kurzCY7tmC+6y66mCKCaCKu6mC2cTM6SnCV5bF7L:jjl7D+6y66mCKCaCKu6mC2R6SnI7L

Score

N/A

Malware Config

Signatures

Files

645a11aaadaf36858204f53caf6d611be8527fe9d05e399ec1cc349ba8d7a06d
.exe windows x86

daa48bc28a5f5d330a790f282d81f734

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaVarSub
__vbaVarTstGt
__vbaStrI2
ord690
_CIcos
_adj_fptan
ord585
__vbaHresultCheck
__vbaVarMove
__vbaStrI4
__vbaRedimPreserveVar
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
ord588
__vbaLenBstr
__vbaStrVarMove
__vbaLateIdCall
__vbaVarIdiv
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFpCDblR8
EVENT_SINK_Invoke
ord620
__vbaVarIndexStore
__vbaNextEachVar
__vbaFreeObjList
ord516
__vbaStrErrVarCopy
__vbaVarIndexLoadRef
ord517
_adj_fprem1

Sections

.text
Size: 352KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ