f0efaa66ef4eb7f6a8c1224e8440d81d0ff6b643b5f6e621ffe197e8697092b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0efaa66ef4eb7f6a8c1224e8440d81d0ff6b643b5f6e621ffe197e8697092b0
Size

384KB
MD5

4612865134d8159606c1eb2923822412
SHA1

aba377af1d3b35291b214d30de514125c8483a53
SHA256

f0efaa66ef4eb7f6a8c1224e8440d81d0ff6b643b5f6e621ffe197e8697092b0
SHA512

26a357e1757b856aaa39dc2eab30bc35b75ee0276b47b4873ad686f9403cfe7f16f093d5f03492a992c895bad5652a864055b5c8c588c6bd785bf487eb4e257e
SSDEEP

3072:dk5WPDO8CiS3P4SMP3SS5MGlBq/ItV7maLvDrgjVNtdR22n6vdiBzpLJ3K7uGvxZ:djYwSJs/lgQ77miHTvdRqa

Score

N/A

Malware Config

Signatures

Files

f0efaa66ef4eb7f6a8c1224e8440d81d0ff6b643b5f6e621ffe197e8697092b0
.exe windows x86

432829b4a53f175198c5f4352fa01d08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord690
MethCallEngine
EVENT_SINK_Invoke
ord516
ord519
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord300
ord595
ord596
ord303
ord598
ord305
ord599
ord306
ord520
ord522
ord309
ord524
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord606
ord607
ord608
ord531
ord534
ProcCallEngine
ord535
ord645
EVENT_SINK2_AddRef
ord681
ord685
ord100
ord689
ord616
ord617
ord619
ord651
ord652
ord581

Sections

.text
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ