61e3ea2b115ba4542e53d86d27181c0699737fbc6c2963aba0761d05f01d961e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61e3ea2b115ba4542e53d86d27181c0699737fbc6c2963aba0761d05f01d961e
Size

128KB
MD5

b9d6ddc86918bec7f8dff0b210e13bfc
SHA1

115befbc51821306a136cc617e9a5675017f75f3
SHA256

61e3ea2b115ba4542e53d86d27181c0699737fbc6c2963aba0761d05f01d961e
SHA512

e811a0fe1ff47c581433f5873be29b016844ee5abaf77c737b3d9b76441dabcde13ca0061ad61dff7bbb7d50bd7ff8b72cd74b1afbf90fd1d3b749d46787ee01
SSDEEP

768:joNoJ/ijZerIjX5VnagwIDog8xt6zA3bi7FLwpCWzK91SKSfxT:jSjC+5VaQOuA3npeSp

Score

N/A

Malware Config

Signatures

Files

61e3ea2b115ba4542e53d86d27181c0699737fbc6c2963aba0761d05f01d961e
.exe windows x86

75077d3bd7d80afc6274d192f19fe29b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
__vbaCopyBytes
ord666
ord667
ord593
ord594
ord595
ord598
ord520
ord631
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord570
ord572
ord685
ord578
ord100
ord616
ord617
ord580
ord581

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndata
Size: 76KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE