2ef402f6cd4933ed2f7ec02930a91c7156787e3b4de69f79ccc5b97668201982 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ef402f6cd4933ed2f7ec02930a91c7156787e3b4de69f79ccc5b97668201982
Size

596KB
MD5

215fb32064bf668cf52fc67c1d858ae1
SHA1

6045f5870623c2c3c4d21cb67a3d6d9d08be6f9b
SHA256

2ef402f6cd4933ed2f7ec02930a91c7156787e3b4de69f79ccc5b97668201982
SHA512

eab6025fbfa080a2b06fcd88aab74398fcc40a4e6bdd89068996983c5329cac90b6be1706225a89962ccc2fa0af21cd6ddd9bdfb3c1bb6bcd81ee43657355089
SSDEEP

6144:wzU5cMFO1A68tsifosSubtUgCD+LAaWpmpqYoaXQNlJDj76NNiDYw:v1FG8f7BnLAMpcagBf76cYw

Score

N/A

Malware Config

Signatures

Files

2ef402f6cd4933ed2f7ec02930a91c7156787e3b4de69f79ccc5b97668201982
.exe windows x86

065239555c9f2de8add00bab72d1356b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord598
ord599
ord631
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord535
ord537
ord648
ord100
ord320
ord321
ord616
ord617
ord580

Sections

.text
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE