16f3a1dec5b5d35852182c5c9b9c3da9705b655b319d259033b8e5c83ab1fba8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16f3a1dec5b5d35852182c5c9b9c3da9705b655b319d259033b8e5c83ab1fba8
Size

584KB
MD5

a2b4a793d042b7228c80e96fbac79f81
SHA1

4d8247b93b2de67215f90786394461667d78b73f
SHA256

16f3a1dec5b5d35852182c5c9b9c3da9705b655b319d259033b8e5c83ab1fba8
SHA512

2d7c8ff6654e58f48a891e90517e78c74787b470e0843d999a8812a9d7f0bdb59a09fb0d92a278d61491669f2e58ac593ba8745f0018642c6cca9a0c9344a544
SSDEEP

3072:/xi481P8rEfjEcfYQyENXvouOzUqHIMufk3OU7CVcSofV94SX/WJYxiAnIV8IA:/o4NWjn/vHoufmdocb0YxiAS8I

Score

N/A

Malware Config

Signatures

Files

16f3a1dec5b5d35852182c5c9b9c3da9705b655b319d259033b8e5c83ab1fba8
.exe windows x86

f0066e766b35480e850c4f6b703d55d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord598
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord537
ord644
ord572
ord100
ord616
ord618

Sections

.text
Size: 576KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ