8b5696a9b52e82a1aa1d926ac5324e900be5194509334a31810997e1f1096441 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b5696a9b52e82a1aa1d926ac5324e900be5194509334a31810997e1f1096441
Size

76KB
MD5

0a175044703535544c9d970a3862dad0
SHA1

655194c76450711dd62e77561a85cb954bcd8241
SHA256

8b5696a9b52e82a1aa1d926ac5324e900be5194509334a31810997e1f1096441
SHA512

d7004e596f0d3bbfa8542f31e78944e9623f2a147fec627bb76c6112431674e5a0e847a7374173560173e27eb33ae402b0d5c2e3f6db7dc8ba700f6b4856b497
SSDEEP

1536:13i6EBXlLOUpgC2YwofaBKX2sp9NLMXy3i6E/:+LOUpgC2YwoSu2sp9NLw

Score

N/A

Malware Config

Signatures

Files

8b5696a9b52e82a1aa1d926ac5324e900be5194509334a31810997e1f1096441
.exe windows x86

7f88c9db546824c7d65dad8e27b90958

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord519
ord595
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ProcCallEngine
ord536
ord576
ord100
ord610
ord612
ord616
ord617

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE