5dc1fa92db597a574ea86e1672a56c43267c9924dfae73a7886997c166c2b77b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dc1fa92db597a574ea86e1672a56c43267c9924dfae73a7886997c166c2b77b
Size

1.2MB
MD5

0ef19fc6ada55eb231d0cbdc8d588012
SHA1

85a7951ea25a9c8c8959bca316f459219ae4f041
SHA256

5dc1fa92db597a574ea86e1672a56c43267c9924dfae73a7886997c166c2b77b
SHA512

dd4c34aff1822b6b3712196d3a58004b177df420fb9c4786d851e66a6ef1510c0296d25397d17fece22f63d15d948fcfb9be9ffa3fa954a0a1c9d4ab5579e13d
SSDEEP

24576:SfXxFAHTpcdycbPT4l2XGWtHM0+M5sH2iq9LpKssuJOD8CM1FZQd6/:SwCdyiTyAGWtHZ599YsX1t1F+8

Score

N/A

Malware Config

Signatures

Files

5dc1fa92db597a574ea86e1672a56c43267c9924dfae73a7886997c166c2b77b
.zip
E筋辅助工具箱.exe
.exe windows x86

ec05b89a21980055778728fe48c2ffba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord626
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord570
ord685
ord100
ord616
ord618

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ