df1288b0074ba3c72f4b3c4dd908da8ac086ce3e7f2552daa68938f307cdac6a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df1288b0074ba3c72f4b3c4dd908da8ac086ce3e7f2552daa68938f307cdac6a
Size

74KB
MD5

91368be0c405f9104bf20fae826e00d0
SHA1

0dfdb5aad49b8c755077657a289bf0ca2b0ff862
SHA256

df1288b0074ba3c72f4b3c4dd908da8ac086ce3e7f2552daa68938f307cdac6a
SHA512

bc2e644b30f9f481835ba4fcefb966b044cde68558403752738a996ac2b11f40356efa06790d88b93d7d8cdc268c35ea35151f3fb839376609d4a6e6e1abaf17
SSDEEP

768:hLLJm6cBTClcALYUP1Dpx0pcTV6oIqCptw2jOal4:pLY6VcALDPdp6CCptL4

Score

N/A

Malware Config

Signatures

Files

df1288b0074ba3c72f4b3c4dd908da8ac086ce3e7f2552daa68938f307cdac6a
.exe windows x86

0964e2307f9d3cd9f829d5538c59e86f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAnyAccessesGranted

msvbvm60

ord183
ord695
ord698
MethCallEngine
ord518
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
ord677
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432
ord540

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ