8318671251[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8318671251.zip
Size

94KB
MD5

05b9441ab1c9a8eb35757bcca330aded
SHA1

96d1327b55395408c148cd70822353575c3aa5e9
SHA256

8d2b8a51a581da6e0135bef359fd95c8d13fd48b3700a2986229934630040c9b
SHA512

e476e0ad8b51836eb3d196b8dc096b1d9d39577db7efcd274a02ea7c86b46f6e5b59429932767889171cdccffc2d43b3e7bc41ab3a64e1808872bba548a4a234
SSDEEP

1536:lIxQ99q/U0Mn3bfQ6RvSDV8vMV2Uu8qUm/VDbB/6U33DAn0E9kIuFR7PQgpNfucN:l1g80gQ6R5vMsaqU+UmIurZNfYu

Score

N/A

Malware Config

Signatures

Files

8318671251.zip
.zip

Password: infected
263e739040a6389f5af71b1474cc78f37b0e3f35325ca648d0d8a63e4bfed2a1
.exe windows x86

Password: infected

b5688d14696c0efcb4bfb3c1231064a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord598
ord520
ord525
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord531
ord716
ProcCallEngine
ord537
ord645
ord648
ord681
ord576
ord578
ord100
ord579
ord610
ord616
ord617
ord619
ord542
ord545
ord580

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ