6e593c137604b742d1065a99a8f86244e79b9afa51df24dc6bc4a752e7728ee1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e593c137604b742d1065a99a8f86244e79b9afa51df24dc6bc4a752e7728ee1
Size

144KB
MD5

590511d6140d5aed3cd2547268bb3b96
SHA1

5c2212cc79aae033a687aacfbe606b887e67b1d5
SHA256

6e593c137604b742d1065a99a8f86244e79b9afa51df24dc6bc4a752e7728ee1
SHA512

1b1bff802b6374f1f0ea19e9891605f791cb411274773a46e4113efcb2751b948686041171950205bd1ad95ebd5396fb6af1b7a3adf6610bab5b89a0629b4c73
SSDEEP

1536:mkFJggbmPSq0V+FKADv1BwZpIwqWZe0CQ7A:xggDV+JtW+2lCQ7

Score

N/A

Malware Config

Signatures

Files

6e593c137604b742d1065a99a8f86244e79b9afa51df24dc6bc4a752e7728ee1
.exe windows x86

3697944a64a62226d23da3306d9467c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

thumbs .db

MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE