96811e1cb8448a8c5369bb97b23263863baab534ef845e8efe0274efb4c217ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96811e1cb8448a8c5369bb97b23263863baab534ef845e8efe0274efb4c217ec
Size

556KB
MD5

0c715cfeb68fe7bb707aa973f9d7af76
SHA1

22dceef5613c6a9dca9737d56e5f7fafce02b954
SHA256

96811e1cb8448a8c5369bb97b23263863baab534ef845e8efe0274efb4c217ec
SHA512

eab8bf88780838415f5460f05f5bef89f987749c1c93dad7f7b0908a335c9e1d4cedb079eba94049c4b2bc31f76f22eb3dc52202475876e8412b8710a54c404f
SSDEEP

12288:tEKihOOn3FsrTOIq4thQ6eQnZ23rfaZ/qleJmndVfBFrLe8pVnmGZaSgsLrCmx5Q:tEwOnbp6H6iode8ZZ

Score

N/A

Malware Config

Signatures

Files

96811e1cb8448a8c5369bb97b23263863baab534ef845e8efe0274efb4c217ec
.exe windows x86

809a7fd0589fff0d579345f2e1959f79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
ord589
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
ord519
__vbaStrCat
ord661
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
ord631
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
_adj_fprem
_adj_fdivr_m64
ord714
ord609
__vbaFPException
__vbaDateVar
__vbaI2Var
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
ord616
ord617
_CIatan
__vbaStrMove
_allmul
ord651
ord545
_CItan
ord546
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 536KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ