4649e09fdbb5bbad3a57cee0fc6b103b117717a56627b3088ae937439e34414b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4649e09fdbb5bbad3a57cee0fc6b103b117717a56627b3088ae937439e34414b
Size

318KB
MD5

c2b7ab6045ca679102f3e20d5e59e61a
SHA1

46359a2211551cc697cdb1507174b5b8b9ad7db4
SHA256

4649e09fdbb5bbad3a57cee0fc6b103b117717a56627b3088ae937439e34414b
SHA512

fdd52895dc2224c14073a06078338ea553a0af268f59095e476b7ecb5e99fcaa16a1d4a53ff3a46f1f7f87c6f53894448d64e8cff98148afc0743e28ddd5a231
SSDEEP

6144:2MlUK93gN4R9EqegKUXZeKPVvSZeKPVvV7/AEzx3:2MmK93gN4R9iU4WNWP

Score

N/A

Malware Config

Signatures

Files

4649e09fdbb5bbad3a57cee0fc6b103b117717a56627b3088ae937439e34414b
.exe windows x86

b4350e243b0646b68c3d0a8dbe64f3f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
__vbaStrR8
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaR8Str
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarAdd
ord614
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaFPInt
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ