f1bcfa860c788c72c084ed8b3e3f22db649f747813c41cdee52c4130d91203bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1bcfa860c788c72c084ed8b3e3f22db649f747813c41cdee52c4130d91203bf
Size

256KB
MD5

0f4e38991ced60d599875370c5ba4af8
SHA1

cac663c02edadbad1e3dd37789130a7e0ff9c2ed
SHA256

f1bcfa860c788c72c084ed8b3e3f22db649f747813c41cdee52c4130d91203bf
SHA512

602f712a2cb6ebfc2fff44845bbb4974e67695107a6aef9f8239c10e0b36923ce4adb304545e60951f0b2cc362232b68341f8e77682b58d960fbb09cfe5fa911
SSDEEP

3072:jtn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E4tm:6

Score

N/A

Malware Config

Signatures

Files

f1bcfa860c788c72c084ed8b3e3f22db649f747813c41cdee52c4130d91203bf
.exe windows x86

00bc5f09acdf56f6d5370058212ae617

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord516
ord626
ord628
ord666
ord631
ord632
ord526
ord528
ord562
DllFunctionCall
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
ord572
ord100
ord617
ord581

Sections

.text
Size: 248KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ