650bb782d85a14537972839eb703204c9956d897e5208eb18f20373babe829bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

650bb782d85a14537972839eb703204c9956d897e5208eb18f20373babe829bd
Size

36KB
MD5

824689df9e10702d82690d21da8076b0
SHA1

28a186ebd475f24d0db1c036502b65ddb8c73fa6
SHA256

650bb782d85a14537972839eb703204c9956d897e5208eb18f20373babe829bd
SHA512

2e1effbd7001c2d090d7bee467fd6b9598e2319c9b03428dcea39b05440b19100891464cc097b5f61c8e0169b051fe000c593e5c24d7abcfd456a82f6ccad7b8
SSDEEP

768:WrOoj7LMEW/KUdKLnO+iFfZfGKh04X4w+lJYCyZj:WrZgj/hsrOpnxXZ+lJA

Score

N/A

Malware Config

Signatures

Files

650bb782d85a14537972839eb703204c9956d897e5208eb18f20373babe829bd
.exe windows x86

01d2bd638f0a976b01a69b7fb5b85b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

kernel32

MulDiv

msvbvm60

ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ