546141c5db5084fc37ee583a81404ca92973a3535ed5938bca9d68d4dc9b5c2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

546141c5db5084fc37ee583a81404ca92973a3535ed5938bca9d68d4dc9b5c2b
Size

36KB
MD5

0c7905b5fd90265bdf1cbb86ddb2f867
SHA1

c6b27e72dd14a1f1f0068a16cbc877c8fc8ffba0
SHA256

546141c5db5084fc37ee583a81404ca92973a3535ed5938bca9d68d4dc9b5c2b
SHA512

da5077eee220018a029a901f6e48ea45e79c3ea5e922c8bc09ed9574d694ed7e17658ee122845a3f5d3086e5b7a4e58e45f5ad0a42156097ee59f607e3f644fd
SSDEEP

768:posYGDoALalBU6nMC7k8eRjnpxNYy2A+:SEDoIagiMAk8em

Score

N/A

Malware Config

Signatures

Files

546141c5db5084fc37ee583a81404ca92973a3535ed5938bca9d68d4dc9b5c2b
.exe windows x86

ef5b7390315c2cad3d1e8ed5978b63c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolder

msvbvm60

ord515
ord669
ord520
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord570
ord100
ord432

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ