648e40c819009a1ef0415d16826d76cf8151d8b9ee8c548a4a80d1dcaa09e362 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

648e40c819009a1ef0415d16826d76cf8151d8b9ee8c548a4a80d1dcaa09e362
Size

276KB
MD5

618c5d2c9800b4ac55d5bcde387172c8
SHA1

5d8a298f8ec48e3b823eb419c45f31b1aa1c0428
SHA256

648e40c819009a1ef0415d16826d76cf8151d8b9ee8c548a4a80d1dcaa09e362
SHA512

d5e5df0e2516c665598a42cac3f804b3538b353eee10b3e70e9160b1c918fbfa3ceecd5e48ee23bf0d1e9a823ee09da05bf0bb10596f656c1b908685356ffdc8
SSDEEP

3072:Rzs2sHsp2hS9yEsm684Yhw9VJqnnn4VMhai8HuTdSqMq0viBKmx4S2bYttptxPtU:Rzs2sHsT0r9V8RjX+ea3D

Score

N/A

Malware Config

Signatures

Files

648e40c819009a1ef0415d16826d76cf8151d8b9ee8c548a4a80d1dcaa09e362
.exe windows x86

1e268a02bff3e61bd45df30c0d52be9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
ord586
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
ord628
__vbaSetSystemError
ord661
__vbaHresultCheckObj
_adj_fdiv_m32
ord667
ord594
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
ord673
_adj_fpatan
ord675
ord676
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord609
__vbaFPException
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarDup
__vbaFpI2
_CIatan
__vbaStrMove
ord543
_allmul
_CItan
ord546
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ