61e65572ae20f222d076d588504a56257b50174b6b6dc87da813980b42e63de6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61e65572ae20f222d076d588504a56257b50174b6b6dc87da813980b42e63de6
Size

80KB
MD5

3d4de299ed0e759be2401e1a5834107f
SHA1

bed7bc42ec418880afc54973706d51bb89b18c90
SHA256

61e65572ae20f222d076d588504a56257b50174b6b6dc87da813980b42e63de6
SHA512

9150e2dc32a8583fc14f65d6afcb77c020d79ca00d38a79bee01d89044734620d631daa52360de0a205502053ede4fc665c4943a47b26adbc8e7e28135473ec8
SSDEEP

1536:zgBarmJFNqKvGRUvJGZJgNnBLTMsfPAb9xnhwimidpIEhYvLs4nR:dmpqKvGWvJGeHTFQh1dpIEh4Ls4n

Score

N/A

Malware Config

Signatures

Files

61e65572ae20f222d076d588504a56257b50174b6b6dc87da813980b42e63de6
.exe windows x86

56fb9247bb526e79b672180cf8273676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

msvbvm60

ord183
ord698
ord662
ord669
ord592
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord544

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ