4ab64a43784e7884294c6030819d356b92ee61b26d2851448734060d05d3fdbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ab64a43784e7884294c6030819d356b92ee61b26d2851448734060d05d3fdbb
Size

96KB
MD5

a29d8fac8e7c9709708b948705246c4c
SHA1

b180caf4e6d2b4e7f8c63c8ddc9080b507bab60c
SHA256

4ab64a43784e7884294c6030819d356b92ee61b26d2851448734060d05d3fdbb
SHA512

7ff24e16725d6e09908777d483a5742589806d2b59ef52c9d9ce568d74d1c06bf818aaa16284b1e066610e79d90e2db1166924ec3dbe93afd28fb87f9cbeaa33
SSDEEP

1536:enhAzTzJTet/UVyFoBEpuT8ti3YFCHBSRT9LA/l:22TeKVXBEpuwg3FHB4Sd

Score

N/A

Malware Config

Signatures

Files

4ab64a43784e7884294c6030819d356b92ee61b26d2851448734060d05d3fdbb
.exe windows x86

6045c012613a7bb8c1881db57ebd4bbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord598
ord522
ord631
ord525
ord632
ord526
ord561
DllFunctionCall
ord563
ord670
ord600
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord681
ord578
ord100
ord616
ord617
ord619

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE