561b00520f7f08430d589c0bb4d450ca2af39b72fd0ecd22b476dada8e9fccb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

561b00520f7f08430d589c0bb4d450ca2af39b72fd0ecd22b476dada8e9fccb6
Size

56KB
MD5

d1d96f775e1b6a33eb74c4af2735eeaa
SHA1

6946d4ff5e70ec92989aacb72096229b359b49ce
SHA256

561b00520f7f08430d589c0bb4d450ca2af39b72fd0ecd22b476dada8e9fccb6
SHA512

11769f81172c123b5cd44c5243d38920fe35f498d3eacb6fe248515e2a89b3fb4d17d1768688240b7c48f42857d840b9082174b5935533f534c76ffed4feac03
SSDEEP

384:G5f8xRD/SQe5fr1zdpoHDjM1cV6D2IeoO5f8xRD/SQe5fr1zdpoHDjM1cV:OsDahpzsp6D2RoWsDahpzsp

Score

N/A

Malware Config

Signatures

Files

561b00520f7f08430d589c0bb4d450ca2af39b72fd0ecd22b476dada8e9fccb6
.exe windows x86

37cf9521fd8d743cf89a62a447d2fb2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
ord593
ord594
__vbaObjSet
ord596
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaFpI2
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaFPInt
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ