1ed018059bc4a9817a885f2d37950bdb2fce0d4f76074cad2b4ffbd99600c6e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ed018059bc4a9817a885f2d37950bdb2fce0d4f76074cad2b4ffbd99600c6e5
Size

96KB
MD5

05ccd8c90b976767eceeda357c8b8613
SHA1

988ca056f702372f031f423b255e737a20bb0516
SHA256

1ed018059bc4a9817a885f2d37950bdb2fce0d4f76074cad2b4ffbd99600c6e5
SHA512

f2de88a38dfa1d53a0affbdade428a355c628d7f9e467b57d14b8e78e437c9c927af969dd8ec7e33780cd8abbed63461f0bab92821be50c8b08685f0751ce442
SSDEEP

1536:SXzVmQrkrQ7zlAr9Bg8EP9fTfXF5InomMbOUHJHKQcBHXECBnE5m6:0VTrkrC2JBvU9J8MaUpHncBHfEg6

Score

N/A

Malware Config

Signatures

Files

1ed018059bc4a9817a885f2d37950bdb2fce0d4f76074cad2b4ffbd99600c6e5
.exe windows x86

231204c30513cdf63e0bfa48674b93a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netshell

DllCanUnloadNow

msvbvm60

MethCallEngine
ord669
ord592
ord524
EVENT_SINK_AddRef
ord560
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord652

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ