c406a50e46da76fa0e04101b6626e74b6db7a8d88de9d1c11aafabf1a91f793a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c406a50e46da76fa0e04101b6626e74b6db7a8d88de9d1c11aafabf1a91f793a
Size

96KB
MD5

91966c20f14fb9774e3f3cecf9645648
SHA1

ac30329f6034e2f72e0778afc38e887badb13154
SHA256

c406a50e46da76fa0e04101b6626e74b6db7a8d88de9d1c11aafabf1a91f793a
SHA512

56b208b325abfe7b03646ee647be650cdaace83ca88b3ec7189f65461ccb285c0cdb702ff182ae2660d1ef259af2a74a844cb1b647bc103ea764db6882f341a9
SSDEEP

1536:2YzVmPsP9n1BLfE4bdV8ZwhaeVt78WJMitiWhKRovlUnEDEAc:zVdn3p/6wh9V8WJjhKR+iEDk

Score

N/A

Malware Config

Signatures

Files

c406a50e46da76fa0e04101b6626e74b6db7a8d88de9d1c11aafabf1a91f793a
.exe windows x86

231204c30513cdf63e0bfa48674b93a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netshell

DllCanUnloadNow

msvbvm60

MethCallEngine
ord669
ord592
ord524
EVENT_SINK_AddRef
ord560
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord652

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ