e9158568ccba2a886798398f05fa23bb969b8fbc631d66f23f2f96c1c59fcbf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9158568ccba2a886798398f05fa23bb969b8fbc631d66f23f2f96c1c59fcbf0
Size

64KB
MD5

9192ce7c03f6501cb94c478c0d4036e0
SHA1

321bae34114e04e1cb5d18902d161140a60ae84f
SHA256

e9158568ccba2a886798398f05fa23bb969b8fbc631d66f23f2f96c1c59fcbf0
SHA512

4a8c4785bdc754cf3cdc94970d2cb9424c53ac1ab99f0e65a7b88d86e6120fc2c5f3cfce707cc3fe192e269930dedfb4f7631f6ae2c6f035379e641ad62ad1fd
SSDEEP

768:7s204EpnIPz8v96hkbObBUdIU0ocEnaLj8+IBfCylsCclAYb57X2:7N044I78v96XEnaLj8bh+lF

Score

N/A

Malware Config

Signatures

Files

e9158568ccba2a886798398f05fa23bb969b8fbc631d66f23f2f96c1c59fcbf0
.exe windows x86

3c342e237e3474096f70f4b76f597be5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ContinueDebugEvent

msvbvm60

ord183
ord697
ord698
MethCallEngine
ord598
ord520
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord573
ord681
ord100
ord616
ord544

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ