f1ef8ec7167a82d94b83b8ed12755152e2a474efb9f56d2eaea4028b137bbd90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1ef8ec7167a82d94b83b8ed12755152e2a474efb9f56d2eaea4028b137bbd90
Size

84KB
MD5

a7ffdd3e0f7f7214563e9722a313d131
SHA1

517d4fd4e466444d85e54731d1dd0b17d6b98adc
SHA256

f1ef8ec7167a82d94b83b8ed12755152e2a474efb9f56d2eaea4028b137bbd90
SHA512

14c6bfed1594caedc7505a55357a8bfc718374ccdc58677ada7d3bfc7ce327dee0868ca16a022c248e46b8802731e2508f6f7dd522941d78035ed913b8f63382
SSDEEP

1536:bBLiLXkomzbZyZwfLgH0fARYqfRLUT6MbT:bKgbZyiDgnYqfRLUOo

Score

N/A

Malware Config

Signatures

Files

f1ef8ec7167a82d94b83b8ed12755152e2a474efb9f56d2eaea4028b137bbd90
.exe windows x86

22f15bacff0c468512ef86c28206180e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
ord698
ord516
_adj_fprem1
ord628
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
ord663
_adj_fdiv_m32
ord591
ord594
ord596
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
ord527
__vbaStrCmp
DllFunctionCall
_adj_fpatan
__vbaR4Var
ord678
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaDateStr
_adj_fprem
_adj_fdivr_m64
ord714
__vbaFPException
__vbaStrVarVal
ord538
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
ord574
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord687
ord610
__vbaVarDup
_CIatan
__vbaStrMove
ord541
ord650
_allmul
_CItan
ord546
_CIexp
__vbaFreeStr
ord581

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ