8e931fb84a7581c4560fb65a263e133e74c1fa759d8df6f285601c09d339399c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e931fb84a7581c4560fb65a263e133e74c1fa759d8df6f285601c09d339399c
Size

36KB
MD5

05a5d271a47e081ca9d3bdfd3e0c04b6
SHA1

93883ae890dc1ea400fe811d687d21854b0a1e7a
SHA256

8e931fb84a7581c4560fb65a263e133e74c1fa759d8df6f285601c09d339399c
SHA512

32af93f0ea488918edeac340015dec463824fdee5a28c0360a622e6d975c6cd72c88e2171e287fa79a0d35a23eb423a47965827692ca1e339fe86cdff9b26b7e
SSDEEP

768:pmx+hPg08V5xw2A30LTuvurjqh04HNw+lJYCyZ/:pmx8IMF3+k6qa+lJc

Score

N/A

Malware Config

Signatures

Files

8e931fb84a7581c4560fb65a263e133e74c1fa759d8df6f285601c09d339399c
.exe windows x86

01d2bd638f0a976b01a69b7fb5b85b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

kernel32

MulDiv

msvbvm60

ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ