a9797a963166e6f2a3129f2a7f7a394f02a6271e910939829c878a4cb8c0f27d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9797a963166e6f2a3129f2a7f7a394f02a6271e910939829c878a4cb8c0f27d
Size

72KB
MD5

075c4a862467fac9a17a5c546182de30
SHA1

056fef4cad14b5837677efb058bc5ed3e92586f4
SHA256

a9797a963166e6f2a3129f2a7f7a394f02a6271e910939829c878a4cb8c0f27d
SHA512

596b368dafeea432b79cebc864b73f9d78d014bf9ed51dcc13c913173b44c86bf4736a884590c62d845798fd2152b2d06e6c69434505fee66583e5c1241163f4
SSDEEP

768:1lraDg0AxwfIwrrBIg2Yd2SgoTV6oIWOs9c28moshfNQl:bra00JgSBIgYSggOsamjm

Score

N/A

Malware Config

Signatures

Files

a9797a963166e6f2a3129f2a7f7a394f02a6271e910939829c878a4cb8c0f27d
.exe windows x86

d763de8eccf820161f0d3b71a630750b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAnyAccessesGranted

msvbvm60

ord183
ord585
ord698
MethCallEngine
ord518
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord679
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord714
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ