49f97f429675a3b6c08b07d6bc0c9fb3cead8f7e50b4ff7e093fb4158e044040 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f97f429675a3b6c08b07d6bc0c9fb3cead8f7e50b4ff7e093fb4158e044040
Size

624KB
MD5

458272731f0410493a7132423211abb0
SHA1

9160d029ac9207a8a779a080a22fbadf4794d394
SHA256

49f97f429675a3b6c08b07d6bc0c9fb3cead8f7e50b4ff7e093fb4158e044040
SHA512

9b5892e6268c7159e89e6b1a84dc18fff9fbf7996a23c507ae4a8908db10b317ed0f757a42333ea7396a6f624dc5cb35a1e52e13c77e4cf9ab2093f11f9c906c
SSDEEP

12288:uwXQXQY9KsbPFjl+W4mBZ1lzWl4/mpM+tD1hQHC53cSnPhWhA/UzryuV6jLfRaPE:uxKWiyxle4KM+tRJJPhWq/U6qZPtLH

Score

N/A

Malware Config

Signatures

Files

49f97f429675a3b6c08b07d6bc0c9fb3cead8f7e50b4ff7e093fb4158e044040
.exe windows x86

fddbe48e0e1597bd6e225dae3cb82f02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord585
ord586
ord695
MethCallEngine
ord594
ord525
EVENT_SINK_AddRef
DllFunctionCall
ord671
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord571
ord100
ord616

Sections

.text
Size: 616KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ