95d8df484c8be882041f3af89167735a487c61f36f6eeac031c3be2e8db9e21f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95d8df484c8be882041f3af89167735a487c61f36f6eeac031c3be2e8db9e21f
Size

128KB
MD5

0652c9085881a535755e79fe06c8e960
SHA1

2497bcd0cf42495c12544cef79793539c0766315
SHA256

95d8df484c8be882041f3af89167735a487c61f36f6eeac031c3be2e8db9e21f
SHA512

9199cc1792a0d08b531864fbed910a3a8a8ac6c8cb8fc1783a1157e9d83569d49e7d641b8ece83fa0387bcd03258711fc114add6ba2304e2fc93dc10bf56ee61
SSDEEP

1536:ZjHVDXLFFgKZB21UPTRhSPW/WQXBvoNyUWT9JKksCuHyuetUFVhUhmliAjD5A:T3FFdBs0TRhSefUWItSuAUFnULO

Score

N/A

Malware Config

Signatures

Files

95d8df484c8be882041f3af89167735a487c61f36f6eeac031c3be2e8db9e21f
.exe windows x86

edefbe0ade482b3041b62efef9da15a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
Zombie_QueryInterface
ord556
ord520
ord524
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord538
ord100
ord619

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ