4912fa866c6724c64f737a19ee96f463585c09d7c5c4d631d80d3891a47faef3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4912fa866c6724c64f737a19ee96f463585c09d7c5c4d631d80d3891a47faef3
Size

68KB
MD5

0b8350a2dd102a966a0c434894798583
SHA1

c85699582425acc10e99fb58e4ab6edaf50451a4
SHA256

4912fa866c6724c64f737a19ee96f463585c09d7c5c4d631d80d3891a47faef3
SHA512

bac5d8153005b2b62cee9e3379704284fc79e0c2c14538496f0d7a2684b539848561e0a818e9f8c1fd8e8abdcf2c5a91e31be8aeb8625987ab90b1265f0acb15
SSDEEP

768:49qkbXMydzccPHwHkeWJ4Dyb2BShGxrd9Dn3HFK3GGOOCo:4skAyNXHwE4BBbrl0NO1

Score

N/A

Malware Config

Signatures

Files

4912fa866c6724c64f737a19ee96f463585c09d7c5c4d631d80d3891a47faef3
.exe windows x86

d606caa32e5e982ebdc8c207acdb1297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord187
ord588
ord698
MethCallEngine
ord516
ord669
ord592
ord593
ord594
ord595
ord702
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord529
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ord318
ProcCallEngine
ord535
ord536
ord537
ord644
ord645
ord100
ord689
ord610
ord612
ord613
ord616
ord617
ord581

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ