d499e23d1ba6da4ab07db49102fd0a3272ae1fde9d629c2b82f20a24e397897d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d499e23d1ba6da4ab07db49102fd0a3272ae1fde9d629c2b82f20a24e397897d
Size

159KB
MD5

2c3b12d67bf2a12d581c8ba83688b9e3
SHA1

2f0de719d66110224fb2268630fdf76122881ea2
SHA256

d499e23d1ba6da4ab07db49102fd0a3272ae1fde9d629c2b82f20a24e397897d
SHA512

9e0c55c0b61afdce7eadfefc17481e48549b7bcbe5505ffa9abc241d033e72584cc86ba7a5c21cb24c846363000f9f8563ba8fb73af19a049016b8ceaf24e795
SSDEEP

3072:MW8jFVeo+WDGqHY7ZJ6uHbfzEmKcSIjcBWQUx7T+g9S4:M3+WDGqHq7fzdwBW9xGi

Score

N/A

Malware Config

Signatures

Files

d499e23d1ba6da4ab07db49102fd0a3272ae1fde9d629c2b82f20a24e397897d
.exe windows x86

0b12ad32231b9bddbeb1abc0d228afc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DeregisterEventSource

msvbvm60

ord183
ord553
ord668
ord594
ord598
ord522
EVENT_SINK_AddRef
DllFunctionCall
ord670
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord615
ord432
ord547

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ