dfd99ae018695e5dcefadf5551694ed764bb19c603273a706f215987eb5b988c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfd99ae018695e5dcefadf5551694ed764bb19c603273a706f215987eb5b988c
Size

128KB
MD5

362cbbd51f920df7847d6ec159f06704
SHA1

466248a0771a1b8f5a89351245649d389966c904
SHA256

dfd99ae018695e5dcefadf5551694ed764bb19c603273a706f215987eb5b988c
SHA512

b00567912a0b03a2a6d8afa40ead308f1eab20f2538534ee68b00fc434904353191a8387a53af20b3f8e8ecd95420c2afe88cf8430eff3f4ec0d2b15ad61db0e
SSDEEP

768:BDbM0G1aIeMT2eaxg83PuUeqTaeBBW+9BkhtLxzjroQTo2jzr/fDHLVQIAxQQ:BnMDaacg8GtyTlML1VfjLHlAT

Score

N/A

Malware Config

Signatures

Files

dfd99ae018695e5dcefadf5551694ed764bb19c603273a706f215987eb5b988c
.exe windows x86

795509397dc109a7733bf6ddf62b0995

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursorPos

msvbvm60

ord690
ord187
ord588
MethCallEngine
ord516
ord661
ord557
ord593
ord300
ord594
ord595
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ord318
ord319
ProcCallEngine
ord644
ord570
ord681
ord685
ord100
ord689
ord320
ord321
ord617

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ