dfad5813535b6f409fd3bb49998e7a0b63f30bf4bd7694cf4d6ced4ce99f8908 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfad5813535b6f409fd3bb49998e7a0b63f30bf4bd7694cf4d6ced4ce99f8908
Size

516KB
MD5

2f22cfe3eb7033325c4b1deb8c9b93f9
SHA1

cd614d28751c7515a173043d67c8e42c5f73b9db
SHA256

dfad5813535b6f409fd3bb49998e7a0b63f30bf4bd7694cf4d6ced4ce99f8908
SHA512

215a0d003422595e84983f76316e25a50928d140a6253fbdafaafd1801c87669dca7c0438f731ba15c6c8a4a89dd7a5bd7c71044f971e3c8de0f62e359caad6e
SSDEEP

12288:GBYsWCGqFTYIyQLGhAGgV54IDxIRKP1SXsrUQl4:GBYPCGqFTYyGK9iKxIRIfrUQl4

Score

N/A

Malware Config

Signatures

Files

dfad5813535b6f409fd3bb49998e7a0b63f30bf4bd7694cf4d6ced4ce99f8908
.exe windows x86

113a17916297563601e5b5d03032991b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60.dll .

MethCallEngine
ord665
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ord644
ord537
ord570
ord648
ord681
ord685
ord100

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 472KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ