ad05b839759d33b8c6b85666bfe8647bc6168aae88295288db2d4bc434316dbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad05b839759d33b8c6b85666bfe8647bc6168aae88295288db2d4bc434316dbd
Size

168KB
MD5

069af3146cfb72fd158c8b65397909c0
SHA1

92aeb4892b485f0d5a8853d931f708b5c885a17f
SHA256

ad05b839759d33b8c6b85666bfe8647bc6168aae88295288db2d4bc434316dbd
SHA512

c105bacfc211d9eb6cfb982e529c46b514012384d5559a4c5b3ed51b6d61249935e6806c88cfd3dd42585e2520e4589c425f318fdc2f6a18909ea147830ddb1f
SSDEEP

3072:8BAQrU4gQ+/VM7T/Udi6OGoAJ7P5smJHWOerTb6NvC3iuxM:jqsLNM74MX077JMHWNK3Y

Score

N/A

Malware Config

Signatures

Files

ad05b839759d33b8c6b85666bfe8647bc6168aae88295288db2d4bc434316dbd
.exe windows x86

de2b99ac71d6bcc710f42f695ebaafa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DeregisterEventSource

msvbvm60

ord183
ord584
ord587
ord594
EVENT_SINK_AddRef
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord570
ord571
ord100
ord614
ord432

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ