c5d0d82540a226a0424834f18fdc65630f75514ed11963950bf20bd85baf075a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5d0d82540a226a0424834f18fdc65630f75514ed11963950bf20bd85baf075a
Size

196KB
MD5

921345495f4b7c12b16cb80987fbbaaa
SHA1

8eaef56d4b1f56247d7f23151d62c48122098116
SHA256

c5d0d82540a226a0424834f18fdc65630f75514ed11963950bf20bd85baf075a
SHA512

d2a4744f4e0c76734c2fb839addc900b44a30edd9f962c8258c04f7a4f34f81c1b80fb2210e0221aa81e22e287ed83c6c5163ad273baa45331cb905015ef10b5
SSDEEP

768:Kzy0NEKzAIsFuePPO3at88RuMReTpn8ZRv9QTXuclGV3+bDuEB8owsb0S:ioIsoEvt8EuMItn8vv9QTp44B8on

Score

N/A

Malware Config

Signatures

Files

c5d0d82540a226a0424834f18fdc65630f75514ed11963950bf20bd85baf075a
.exe windows x86

f2e6600072bb6d7ccc255a1732ef5f19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

kernel32

WriteProcessMemory

msvbvm60

ord582
ord583
ord584
ord696
ord516
ord628
ord660
ord593
ord520
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord606
ord608
ord716
ProcCallEngine
ord535
ord644
ord572
ord573
ord575
ord100
ord616
ord617
ord546
ord581

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE