25c4942b07d2ca1fdebedb9eb3763fbcbc49b7465c8e24cb437f910b72591669 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25c4942b07d2ca1fdebedb9eb3763fbcbc49b7465c8e24cb437f910b72591669
Size

35KB
MD5

90a10877961c3e94b7efc503a43ea6d0
SHA1

cfe8b2c0f890a0027c0b8cb1e07c1a2b3d8c21a5
SHA256

25c4942b07d2ca1fdebedb9eb3763fbcbc49b7465c8e24cb437f910b72591669
SHA512

ee0d064cd2784e05953427d5c1238682cb1aba63f26e4516994476b8c1109387cca4fec1e0a716a45e01daf5de3e8f11abc81af24243a61b09549075e02a863b
SSDEEP

768:GAMshcvTzoqr3W03VJYHMP5LctqsbcI5Dr3f:G4YcMnJYK5gtdj

Score

N/A

Malware Config

Signatures

Files

25c4942b07d2ca1fdebedb9eb3763fbcbc49b7465c8e24cb437f910b72591669
.exe windows x86

0b4e1f4c22535ce5e7f11e567fc73039

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord515
ord669
ord592
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord544

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ